Техническая информация
- '%TEMP%\wzQhj.exe' /stext %TEMP%\pass.txt
- '%TEMP%\Program.exe'
- '%TEMP%\S.exe'
- '%TEMP%\wzQhj.exe' (загружен из сети Интернет)
- %TEMP%\wzQhj.exe
- %TEMP%\Program.exe
- %TEMP%\S.exe
- %TEMP%\wzQhj.exe
- %TEMP%\wzQhj.exe
- 'up.###-point.com':80
- 'ch####p.dyndns.org':80
- 'wp#d':80
- up.###-point.com/uploads/da80250496e71.png
- ch####p.dyndns.org/
- wp#d/wpad.dat
- DNS ASK up.###-point.com
- DNS ASK ch####p.dyndns.org
- DNS ASK wp#d
- ClassName: 'MS_WINHELP' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''