Техническая информация
- %WINDIR%\WindowsFormsApplication34.exe
- %WINDIR%\PF.exe
- %WINDIR%\WindowsFormsApplication34.exe
- %WINDIR%\PF.exe
- 'fo###.spycoders.com':80
- fo###.spycoders.com/date.php
- DNS ASK fo###.spycoders.com
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'MS_WINHELP' WindowName: ''