Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\60DxBOxNYU.eu.url
- '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe'
- <SYSTEM32>\svchost.exe
- %TEMP%\BTw.qh
- %APPDATA%\Monitor\Screenshots\05-04-2017\1.44 PM
- %APPDATA%\60DxBOxNYU\60DxBOxNYU.exe
- %TEMP%\aut1.tmp
- %TEMP%\aut1.tmp
- 'localhost':8943
- '17#.#75.138.146':8943