Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Server' = '%WINDIR%\svchost.exe'
- '%WINDIR%\svchost.exe' "%WINDIR%\svchost.exe"
- %WINDIR%\svchost.exe
- %WINDIR%\tmpico.ico
- %WINDIR%\RCX1.tmp
- <SYSTEM32>\MSWINSCK.ocx
- <SYSTEM32>\MSINET.ocx
- %TEMP%\~DF1314.tmp
- %WINDIR%\tmpico.ico
- %WINDIR%\svchost.exe
- %WINDIR%\RCX1.tmp в %WINDIR%\svchost.exe
- 'localhost':1002
- ClassName: 'Winamp v1.x' WindowName: ''
- ClassName: 'Indicator' WindowName: ''