Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\3600str] 'Start' = '00000002'
- <SYSTEM32>\svchost.exe -K NETSVCS
- C:\Documents and Settings\Local User\userdata.dll
- %TEMP%\Temp\calc.exe
- %TEMP%\Temp\1.exe
- C:\Documents and Settings\Local User\userdata.dll
- %TEMP%\Temp\1.exe
- 'kk##.3322.org':1986
- DNS ASK kk##.3322.org
- ClassName: 'Shell_TrayWnd' WindowName: ''