Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'msnmsgr' = '%TEMP%\serv.exe'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{42B27307-290C-6F96-7709-B8CE1080D199}] 'StubPath' = '%TEMP%\serv.exe'
- %TEMP%\serv.exe
- %TEMP%\serv.exe
- 'localhost':3460