Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'csrss' = '%WINDIR%\csrss.exe'
- %TEMP%\7zS1.tmp\csrss.exe b3eed3b6b65a522e053210a3d5f031cb
- %WINDIR%\csrss.exe
- %WINDIR%\TouchlessLib.dll
- %WINDIR%\WebCamLib.dll
- %TEMP%\7zS1.tmp\csrss.exe
- %TEMP%\7zS1.tmp\TouchlessLib.dll
- %TEMP%\7zS1.tmp\WebCamLib.dll
- 'li###noop.com':443
- 'wp#d':80
- wp#d/wpad.dat
- DNS ASK li###noop.com
- DNS ASK wp#d
- ClassName: 'Shell_TrayWnd' WindowName: ''