Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%WINDIR%\Oris\WinNT.exe' = '%WINDIR%\Oris\WinNT.exe:*:Enabled:Client'
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\updatecheckclient[1].txt
- 'www.ne####sserver.co.cc':80
- www.ne####sserver.co.cc/updatecheckclient.txt
- DNS ASK www.ne####sserver.co.cc