Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{95A2EB74-F13D-E2E3-520B-70E8E2D3D6E6}] 'StubPath' = '%WINDIR%\system\win32.exe'
- %WINDIR%\system\win32.exe
- <SYSTEM32>\ctfmon.exe
- %WINDIR%\Explorer.EXE
- %TEMP%\aut2.tmp
- %WINDIR%\system\shell.sys
- %TEMP%\aut1.tmp
- %WINDIR%\system\win32.exe
- %TEMP%\aut2.tmp
- %TEMP%\aut1.tmp
- 'pi####2.3322.org':3460
- 'pi####2.meibu.com':3460
- DNS ASK pi####2.3322.org
- DNS ASK pi####2.meibu.com