Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'goo' = '%WINDIR%\goo.exe'
- '%WINDIR%\goo.exe'
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\dz[1].txt
- %PROGRAM_FILES%\Internet Explorer\usp10.dll
- %WINDIR%\goo.exe
- 'go###esoo.com':80
- go###esoo.com/dz.txt
- DNS ASK go###esoo.com