Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '' = '%TEMP%\NoobDude409 Multihack Loader.exe'
- %TEMP%\NoobDude409 Multihack Loader.exe
- %TEMP%\279D9.dmp
- %TEMP%\dw.log
- %TEMP%\NoobDude409 Multihack Loader.exe
- 'www.ne#####rketplace.net':80
- 'wp#d':80
- wp#d/wpad.dat
- www.ne#####rketplace.net/Panel/
- DNS ASK www.ne#####rketplace.net
- DNS ASK wp#d
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'VMDragDetectWndClass' WindowName: ''