Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\SVCH0ST] 'Start' = '00000002'
- '%WINDIR%\SVCH0ST\PAMx\lRXWR.exe'
- iexplore.exe
- %WINDIR%\SVCH0ST\PAMx\lRXWR.exe
- %WINDIR%\windns.ini
- %WINDIR%\SVCH0ST\PAMx\iIKZbm.dll
- %WINDIR%\windns.ini
- 'we####21.3322.org':2600
- DNS ASK we####21.3322.org
- ClassName: 'MS_WINHELP' WindowName: ''