Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\WinLoadServer] 'Start' = '00000002'
- %PROGRAM_FILES%\Outlook Express\wintload.exe
- <SYSTEM32>\sc.exe config WinLoadServer start= auto
- %PROGRAM_FILES%\Outlook Express\Load.ini
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\home[1]
- %PROGRAM_FILES%\Outlook Express\1.txt
- <Служебный элемент>
- %PROGRAM_FILES%\Outlook Express\wintload.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\ContentPane[1].aspx
- %PROGRAM_FILES%\Outlook Express\wintload.exe
- <Служебный элемент>
- %PROGRAM_FILES%\Outlook Express\Load.ini
- 'hi.##idu.com':80
- 'www.80##isk.com':80
- 'localhost':1034
- hi.##idu.com/zhuiyingnet/home
- www.80##isk.com/ContentPane.aspx?do#####################################
- DNS ASK hi.##idu.com
- DNS ASK www.80##isk.com