Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\XLF6KXJ1HX1D1JZ1F1LB1H1OE2K2QGUK0Q0WM0S0YO0U0AQ0W0CT1Z1FV1B1] 'ImagePath' = '%TEMP%\XLF6KXJ1HX1D1JZ1F1LB1H1OE2K2QGUK0Q0WM0S0YO0U0AQ0W0CT1Z1FV1B1.dat'
- %TEMP%\XLF6KXJ1HX1D1JZ1F1LB1H1OE2K2QGUK0Q0WM0S0YO0U0AQ0W0CT1Z1FV1B1.dat
- \\Device\\HarddiskVolume1\\bf32d3b0\\±\u0456\u0455°\u0422\u0444\u0410\u0426.ini
- \\Device\\HarddiskVolume1\\Muldrop\\±\u0456\u0455°\u0422\u0444\u0410\u0426.joj_0
- %TEMP%\XLF6KXJ1HX1D1JZ1F1LB1H1OE2K2QGUK0Q0WM0S0YO0U0AQ0W0CT1Z1FV1B1.dat
- 'w.###ata.net':80
- 'localhost':1038
- http://w.###ata.net/f3de457445813b1f
- DNS ASK w.###ata.net
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''