Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\clr_v2.0.50727_32] 'Start' = '00000002'
- <SYSTEM32>\svchost.exe -k clr_v2.0.50727_32
- <SYSTEM32>\config\systemprofile\Application Data\wmplay32.chq
- <SYSTEM32>\ntsvc.dll
- 'ma##.#ttrcorp.com':80
- ma##.#ttrcorp.com/index000000001.asp
- DNS ASK ma##.#ttrcorp.com
- '<IP-адрес в локальной сети>':1035
- ClassName: 'Shell_TrayWnd' WindowName: ''