Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'SpIDer Mail ® for Windows Workstation settings module' = '<SYSTEM32>:dwengine.exe'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{3A5D96CB-7BF4-C937-5CAA-EC2F9E85C4DC}] 'StubPath' = '<SYSTEM32>:dwengine.exe'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>:dwengine.exe
- 'by#####rtttt.dyndns.biz':8085
- DNS ASK by#####rtttt.dyndns.biz