Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{gtabix7v-phae-yidv-zchz-9ln54j8nafud}] 'stubpath' = ''
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{mkxpbrzh-wrc2-dm8f-jqoi-ln4q6fxfx3o6}] 'stubpath' = ''
- <SYSTEM32>\inhwoipfi.exe ZhuDongdel%TEMP%\server.exe
- <SYSTEM32>\intpaiupe.exe ZhuDongdel%TEMP%\server.exe
- %TEMP%\server.exe
- <SYSTEM32>\inhwoipfi.exe_lang.ini
- %TEMP%\153625_res.tmp
- %TEMP%\154234_res.tmp
- <SYSTEM32>\inhwoipfi.exe
- %TEMP%\server.exe
- <SYSTEM32>\intpaiupe.exe
- <SYSTEM32>\intpaiupe.exe_lang.ini
- %TEMP%\server.exe
- 'si####gil.no-ip.org':2012
- DNS ASK si####gil.no-ip.org