Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Control\SecurityProviders] 'SecurityProviders' = 'msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, UcnathayRifl.dll'
- <SYSTEM32>\rundll32.exe "<SYSTEM32>\UcnathayRifl.dll",EntryPoint
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\UcnathayRifl.dll
- %ALLUSERSPROFILE%\Application Data\UcnathayRiflSoft.ini
- 'te##.##maincheker.name':443
- DNS ASK te##.##maincheker.name
- '<IP-адрес в локальной сети>':1035
- ClassName: 'Shell_TrayWnd' WindowName: ''