Техническая информация
- [<HKLM>\SOFTWARE\Classes\STMEditor.Document\shell\open\command] '' = '%TEMP%\TRWCOD~1.EXE "%1"'
- '%TEMP%\TRWCodecImageJPEG.exe'
- %TEMP%\setup.dat
- %TEMP%\TRWCodecImageJPEG.exe
- '20#.#6.232.182':80
- 20#.#6.232.182/
- DNS ASK windowsupdate.microsoft.com