Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'sd727decksp.exe' = '%APPDATA%\EB159C0A0EC2EC4ED4415BD2D67F860E\sd727decksp.exe'
- %APPDATA%\EB159C0A0EC2EC4ED4415BD2D67F860E\sd727decksp.exe -i EB159C0A0EC2EC4ED4415BD2D67F860E 7072710000
- %APPDATA%\EB159C0A0EC2EC4ED4415BD2D67F860E\local.ini
- %APPDATA%\EB159C0A0EC2EC4ED4415BD2D67F860E\enemies-names.txt
- %APPDATA%\EB159C0A0EC2EC4ED4415BD2D67F860E\sd727decksp.exe
- 'lo##here.in':80
- lo##here.in/install.php?do#########################################################################################
- lo##here.in/
- DNS ASK s.###khere.in
- DNS ASK lo##here.in
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''