Техническая информация
- services_update.exe
- %APPDATA%\services_update.exe
- %APPDATA%\647871335\realsched
- %APPDATA%\services_update.exe в %APPDATA%\647871335\realsched
- http://wo#####ws.xp3.biz:80/js/twdd5neu/gate.php via wo####ews.xp3.biz
- DNS ASK wo####ews.xp3.biz
- ClassName: '#32770' WindowName: 'Windows Task Manager'
- '%APPDATA%\services_update.exe'