Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Microsoft Windows' = '%TEMP%\svshost.exe'
- skype.exe
- %TEMP%\TMP654.dll
- %TEMP%\7524257.99884517
- %HOMEPATH%\System32.ini
- %TEMP%\TMP456.dll
- %TEMP%\293251.14794722
- %TEMP%\aut1.tmp
- %TEMP%\aut2.tmp
- %TEMP%\svshost.exe
- %TEMP%\aut2.tmp
- %TEMP%\7524257.99884517
- %TEMP%\svshost.exe
- %TEMP%\aut1.tmp
- %TEMP%\293251.14794722
- 'ir#.#hhcd.info':6667
- DNS ASK ir#.#hhcd.info