Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{mgfnhpoe-ochf-lpkq-bbfm-suchqfeumkim}] 'stubpath' = ''
- <SYSTEM32>\inoavpdfe.exe ZhuDongdelc:\server.exe
- C:\123.exe
- C:\server.exe
- <SYSTEM32>\inoavpdfe.exe_lang.ini
- %TEMP%\116734_res.tmp
- C:\server.exe
- C:\123.exe
- <SYSTEM32>\inoavpdfe.exe
- C:\123.exe
- C:\server.exe
- C:\server.exe
- %TEMP%\116734_res.tmp в %TEMP%\117218_lang.dll
- 'mh#.#ptime.org':80
- DNS ASK mh#.#ptime.org