Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Scanboot' = '%WINDIR%\system\scanboot.exe'
- %WINDIR%\test.ed
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\mfc32[1]
- %WINDIR%\system\Scanboot.exe
- %WINDIR%\test.ed
- 'ma##.#ibertysurf.fr':25
- 'www.mu###mania.com':80
- 'localhost':1036
- www.mu###mania.com/ed13015/mfc32
- DNS ASK ma##.#ibertysurf.fr
- DNS ASK www.mu###mania.com