Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Svchost Service Explorer] 'Start' = '00000002'
- %CommonProgramFiles%\InstallShield\explorer.exe
- %WINDIR%\Explorer.EXE
- %CommonProgramFiles%\InstallShield\explorerKey.DLL
- %CommonProgramFiles%\InstallShield\explorer.DLL
- %CommonProgramFiles%\InstallShield\explorer.exe
- %CommonProgramFiles%\InstallShield\explorerKey.DLL
- %CommonProgramFiles%\InstallShield\explorer.DLL
- %CommonProgramFiles%\InstallShield\explorer.exe
- 'www.yx###nyi.com':80
- www.yx###nyi.com/liangliang.txt
- DNS ASK www.yx###nyi.com
- ClassName: 'Shell_TrayWnd' WindowName: ''