Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'key' = '<SYSTEM32>\key.exe'
- <SYSTEM32>\key.exe
- <SYSTEM32>\key.exe
- <SYSTEM32>\%USERNAME%.txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\un-bonito-cuento-Diapositivas[1].pps
- <SYSTEM32>\cuento.pps
- 'sm##.gmail.com':465
- 'di####itivas.com':80
- 'localhost':1037
- di####itivas.com/bajar/22-01-2009/un-bonito-cuento-Diapositivas.pps
- DNS ASK sm##.gmail.com
- DNS ASK di####itivas.com