Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Magicfile' = '%APPDATA%\inid.exe'
- <SYSTEM32>\WinSys\svchost.exe
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\vbc.exe
- %TEMP%\XxX.xXx
- %TEMP%\UuU.uUu
- %TEMP%\XX--XX--XX.txt
- %APPDATA%\inid.exe
- <SYSTEM32>\WinSys\svchost.exe
- %TEMP%\XxX.xXx
- %TEMP%\UuU.uUu
- %TEMP%\XX--XX--XX.txt
- 'mo#####r663.no-ip.biz':1223
- DNS ASK mo#####r663.no-ip.biz
- ClassName: 'Indicator' WindowName: ''