Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'msn' = '<SYSTEM32>\msn.exe'
- <SYSTEM32>\msn.exe
- <SYSTEM32>\CRNJEUFU051613.bak
- <SYSTEM32>\CRNJEUFU051613
- <SYSTEM32>\msn.exe
- <SYSTEM32>\CRNJEUFU051613
- <SYSTEM32>\msn.exe
- 'ft#.##.geocities.com':21
- DNS ASK ft#.##.geocities.com
- ClassName: 'Indicator' WindowName: ''