Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Window Live' = '%WINDIR%\notepad.exe'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{6E919265-FB83-CD5C-392A-423999B526A1}] 'StubPath' = '%WINDIR%\notepad.exe'
- %WINDIR%\NOTEPAD.EXE
- %WINDIR%\Explorer.EXE
- DNS ASK ms#####sgr.no-ip.biz