Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{0E0LD2F2-61XB-4R11-E5OR-LB6N62D18F27}] 'StubPath' = ''
- %WINDIR%\explorer.exe
- <SYSTEM32>\svchost.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\1234567890[1].functions
- %APPDATA%\Microsoft\Windows\_RxyVE.xtr
- %APPDATA%\Microsoft\Windows\_RxyVE.dat
- %APPDATA%\Microsoft\Windows\_RxyVE.cfg
- <SYSTEM32>\run32.exe
- %APPDATA%\Microsoft\Windows\_RxyVE.dat
- %APPDATA%\Microsoft\Windows\_RxyVE.cfg
- '1w#.#yndns.tv':80
- 'localhost':1035
- 1w#.#yndns.tv/1234567890.functions
- DNS ASK 1w#.#yndns.tv
- '<IP-адрес в локальной сети>':1036
- ClassName: 'Shell_TrayWnd' WindowName: ''