Техническая информация
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Windows] 'run' = 'c:\akforwvun\start.lnk'
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\start.lnk
- 'C:\akforwvun\csrss.exe' "c:\akforwvun\mydat.dll",InitSkin
- C:\akforwvun\start.lnk
- C:\akforwvun\csrss.exe
- C:\akforwvun\mydat.dll
- 'any':8086
- 'any':8081
- 'xf##s.com':83
- DNS ASK v.##yf.com
- DNS ASK dd#.#fgns.com
- DNS ASK xf##s.com