Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MSUPD' = '%ALLUSERSPROFILE%\Application Data\wualct.exe'
- %ALLUSERSPROFILE%\Application Data\wualct.exe
- %ALLUSERSPROFILE%\Application Data\wualct.exe
- %TEMP%\TMP110216.tmp
- %ALLUSERSPROFILE%\Application Data\wualct.exe
- %TEMP%\TMP110216.tmp
- %TEMP%\TMP110216.tmp
- 'dd###.dyndns.info':8080
- 'dd###.dyndns.info':80
- dd###.dyndns.info/wKi+hegK/YVVTRVItNEJCMDlBOUMwMi5BZG1pbmlzdHJhdG9yLEEwMGI.asp
- DNS ASK dd###.dyndns.info
- ClassName: 'Indicator' WindowName: ''