Техническая информация
- '<SYSTEM32>\dodonew.exe'
- '<SYSTEM32>\regsvr32.exe' <SYSTEM32>\MotleyFool.dll /s
- <SYSTEM32>\config.xml
- <SYSTEM32>\MCPattern.db
- <SYSTEM32>\dodonew.exe
- <Текущая директория>\Protlog
- <SYSTEM32>\MotleyFool.dll
- %WINDIR%\iprotect1.ini
- %WINDIR%\iprotect1.ini
- 'do####s.dodonew.com':7080
- 'www.su##ike.cn':801
- 're#.#uduniu.cn':8088
- DNS ASK www.su##ike.cn
- DNS ASK do####s.dodonew.com
- DNS ASK www.im##fts.com
- DNS ASK re#.#uduniu.cn