Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ww2w' = '%TEMP%\1212.exe'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{1683ADA4-99B5-448B-ABB7-A7FF9C8A1D85}] 'StubPath' = '%TEMP%\1212.exe'
- '%TEMP%\닷지1.9.exe'
- '%TEMP%\1212.exe'
- ClassName: 'FilemonClass' WindowName: '(null)'
- ClassName: 'PROCMON_WINDOW_CLASS' WindowName: '(null)'
- ClassName: 'RegmonClass' WindowName: '(null)'
- ClassName: 'OLLYDBG' WindowName: '(null)'
- ClassName: 'GBDYLLO' WindowName: '(null)'
- ClassName: 'pediy06' WindowName: '(null)'
- %TEMP%\닷지1.9.exe
- %TEMP%\1212.exe
- '<IP-адрес в локальной сети>':1545
- 'localhost':1545
- 'in###k.noip.me':1545
- DNS ASK in###k.noip.me
- ClassName: '18467-41' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'Indicator' WindowName: '(null)'
- ClassName: '(null)' WindowName: 'File Monitor - Sysinternals: www.sysinternals.com'
- ClassName: '(null)' WindowName: 'Process Monitor - Sysinternals: www.sysinternals.com'
- ClassName: '(null)' WindowName: 'Registry Monitor - Sysinternals: www.sysinternals.com'