Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'mxbb' = '%ProgramFiles%\mxbb\mxbb.exe'
- '%ProgramFiles%\mxbb\mxbb.exe' /firststart
- %ProgramFiles%\mxbb\UnInstall.zip
- %ProgramFiles%\mxbb\UnInstall.exe
- %ProgramFiles%\mxbb\mxbb.zip
- %ProgramFiles%\mxbb\mxbb.exe
- %ProgramFiles%\mxbb\UnInstall.zip
- %ProgramFiles%\mxbb\mxbb.zip
- 'pz.###gonghui.com':80
- http://pz.###gonghui.com/hzzz1/server.ini
- DNS ASK pz.###gonghui.com