Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\UpdateService] 'Start' = '00000002'
- '<SYSTEM32>\UpdateService.exe' -install
- <SYSTEM32>\services.exe
- C:\KSongShow\KSongShow.exe
- %PROGRAM_FILES%\Update\Files.xml
- <SYSTEM32>\Install.xml
- <SYSTEM32>\UpdateService.exe
- <SYSTEM32>\UpdateModule.dll
- <SYSTEM32>\Install.xml
- 'www.dz##.com':80
- http://www.dz##.com/060629/Update.xml
- http://www.dz##.com/SGD/post.aspx
- DNS ASK www.dz##.com