Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'SysMan' = '"%APPDATA%\SysMan\wsmc.exe"'
- %APPDATA%\SysMan\wsmc.exe
- 'sk###.xs4all.nl':80
- 'wp#d':80
- wp#d/wpad.dat
- sk###.xs4all.nl/Tob/Services/CallService.svc
- DNS ASK sk###.xs4all.nl
- DNS ASK wp#d
- ClassName: 'Indicator' WindowName: '(null)'