Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'wmplaurer' = '%WINDIR%\mwplayer1.exe'
- %WINDIR%\mwplayer1.exe
- 'ne##ftp.ru':80
- 'ho###tnt.esy.es':80
- http://ne##ftp.ru/node0/admin@yukoregairu.esy.es/command.txt
- http://ho###tnt.esy.es/file.php
- http://ho###tnt.esy.es/
- DNS ASK ne##ftp.ru
- DNS ASK ho###tnt.esy.es
- ClassName: 'Indicator' WindowName: ''