Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Windows Update' = '%WINDIR%\updates.exe'
- '%WINDIR%\wndupate.exe' --url http://li####ol.ru:8337 --userpass alexchikin63.2:123654
- '%WINDIR%\updates.exe' 0
- %WINDIR%\zlib1.dll
- %WINDIR%\wndupate.exe
- %WINDIR%\pthreadGC2.dll
- %WINDIR%\updates.exe
- %WINDIR%\libcurl.dll
- 'li##pool.ru':8337
- DNS ASK li##pool.ru