Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\RWF1H1D1JZ1F1LB] 'ImagePath' = '%TEMP%\RWF1H1D1JZ1F1LB.dat'
- [<HKLM>\SYSTEM\ControlSet001\Services\7W501X1D1RH9ND9J9PF9L] 'ImagePath' = '%TEMP%\7W501X1D1RH9ND9J9PF9L.dat'
- %TEMP%\RWF1H1D1JZ1F1LB.dat
- <Текущая директория>\ygxdz.dll
- %TEMP%\7W501X1D1RH9ND9J9PF9L.dat
- <Текущая директория>\ygxdz.dll
- %TEMP%\RWF1H1D1JZ1F1LB.dat
- %TEMP%\7W501X1D1RH9ND9J9PF9L.dat
- '12#.#25.114.144':80
- DNS ASK www.ba##u.com
- ClassName: 'UnrealWindow' WindowName: '???????? '
- ClassName: 'UnrealWindow' WindowName: 'ѕшµШЗуЙъ '