Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'smss' = '%WINDIR%\smss.exe'
- %WINDIR%\smss.exe
- %WINDIR%\smss.$$A
- %WINDIR%\MSWINSCK.$$A
- %WINDIR%\smss.$$A в %WINDIR%\smss.exe
- %WINDIR%\MSWINSCK.$$A в %WINDIR%\MSWINSCK.OCX
- 'ka###risi.net':80
- 'localhost':1035
- ka###risi.net/rant.txt
- DNS ASK ka###risi.net
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'InstItClass' WindowName: ''