Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'mnnnn' = '%TEMP%\mnnnn\smallz.exe'
- '%TEMP%\mnnnn\smallz.exe'
- ClassName: '' WindowName: 'Yahoo! Messenger'
- %TEMP%\O6RTwkv2Ry.ini
- %TEMP%\mnnnn\smallz.exe
- %TEMP%\O6RTwkv2Ry.ini
- DNS ASK dn#.##ftncsi.com
- DNS ASK ug####re.web44.net
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''