Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MsCS' = '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\mscs.exe'
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\mscs.exe
- %TEMP%\257AB.dmp
- %TEMP%\dw.log
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\mscs.exe
- 'mm###.com.ar':54321
- DNS ASK mm###.com.ar
- ClassName: 'Shell_TrayWnd' WindowName: ''