Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'wmpdriver' = '<SYSTEM32>:wmpdriverd.exe'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{968A6AD5-567A-BAAB-FEA8-89FDEF672297}] 'StubPath' = '<SYSTEM32>:wmpdriverd.exe'
- %WINDIR%\Explorer.EXE
- msnmsgr.exe
- <SYSTEM32>:wmpdriverd.exe
- 're####on.8866.org':443
- 're####on.xicp.net':8088
- 'dn##.#estcowboy.com':443
- DNS ASK re####on.8866.org
- DNS ASK re####on.xicp.net
- DNS ASK dn##.#estcowboy.com