Техническая информация
- '<SYSTEM32>\regsvr32.exe' <SYSTEM32>\MotleyFool.dll /s
- <SYSTEM32>\MotleyFool.dll
- %WINDIR%\iprotect1.ini
- <Текущая директория>\Protlog
- <SYSTEM32>\Prot.dll
- %WINDIR%\iprotect1.ini
- 'do####s.dodonew.com':7080
- 'id#.#unlike.cn':801
- 'www.su##ike.cn':801
- DNS ASK id#.#unlike.cn
- DNS ASK do####s.dodonew.com
- DNS ASK www.im##fts.com
- DNS ASK www.su##ike.cn