Техническая информация
- [<HKLM>\SYSTEM\ControlSet003\Services\msn] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet002\Services\msn] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\msn] 'Start' = '00000002'
- <SYSTEM32>\svchost.exe -k msn
- <SYSTEM32>\wdstdo.dll
- <SYSTEM32>\0004c77a.001
- 'sm###a.vicp.net':8080
- DNS ASK sm###a.vicp.net