Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{16EBE77A-8D05-7F67-0003-030401070402}] 'StubPath' = '<SYSTEM32>\svchost.exe'
- %WINDIR%\Explorer.EXE
- %TEMP%\nsl2.tmp\ns3.tmp
- %TEMP%\nsl2.tmp\ns4.tmp
- %TEMP%\omg.exe
- %TEMP%\nsl2.tmp\nsExec.dll
- %TEMP%\nsl2.tmp\ns4.tmp
- %TEMP%\nsl2.tmp\nsExec.dll
- %TEMP%\nsl2.tmp\ns3.tmp
- %TEMP%\omg.exe
- '81.##1.124.172':3460
- ClassName: 'Progman' WindowName: ''
- ClassName: 'SysListView32' WindowName: ''
- ClassName: '#32770' WindowName: ''