Техническая информация
- '%WINDIR%\explorer.exe'
- %WINDIR%\explorer.exe
- [<HKCU>\Software\Microsoft\Internet Account Manager]
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\news[1].htm
- %TEMP%\charges.T
- %TEMP%\menu-mobile615437888.png
- 'be##n.at':80
- 'gu####rialand.asia':80
- http://gu####rialand.asia/news.php
- DNS ASK be##n.at
- DNS ASK gu####rialand.asia
- ClassName: 'hundred' WindowName: ''
- ClassName: 'reproductions' WindowName: ''