Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\ProtectGame] 'ImagePath' = '"<Полный путь к файлу>" -s'
- [<HKLM>\SYSTEM\ControlSet001\Services\ProtectGame] 'Start' = '00000002'
- %WINDIR%\sj.log
- 'm1#####1m.blog.163.com':80
- 'by.##7by.com':3721
- http://m1#####1m.blog.163.com/blog/static/26227302520167314181135/
- DNS ASK m1#####1m.blog.163.com
- DNS ASK by.##7by.com
- ClassName: 'SysPager' WindowName: ''
- ClassName: 'ToolbarWindow32' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'TrayNotifyWnd' WindowName: ''