Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '<Полный путь к вирусу>' = '<Полный путь к вирусу>:*:Enabled:MyFireWall2'
- %WINDIR%\ho.tmp
- %WINDIR%\base.txt
- %WINDIR%\ho.tmp
- %WINDIR%\base.txt
- 'www.yh##k.com':80
- www.yh##k.com/base.txt
- DNS ASK www.yh##k.com
- 'www.yh##k.com':8099
- ClassName: 'MS_WINHELP' WindowName: ''