Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'msghts' = ''
- '%ALLUSERSPROFILE%\Application Data\Microsoft\msghts.exe'
- %TEMP%\temp.doc
- %ALLUSERSPROFILE%\Application Data\Microsoft\msghts.exe
- '<IP-адрес в локальной сети>':443
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'WordPadClass' WindowName: ''