Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{S4VRFD4D-0431-11D2-AF31-00C14FA35F02}] 'StubPath' = '<SYSTEM32>\usbmen.exe'
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ver[1].txt
- <SYSTEM32>\usbmen.exe
- 'up####1.tbsxl.org':80
- 'se####1.tbsxl.org':8000
- up####1.tbsxl.org/ver.txt
- DNS ASK up####1.tbsxl.org
- DNS ASK se####1.tbsxl.org
- ClassName: '#32770' WindowName: ''