Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'r24upldoc.exe' = '%APPDATA%\3D852781C134E6EBEEFD8C25A1F9094D\r24upldoc.exe'
- %APPDATA%\3D852781C134E6EBEEFD8C25A1F9094D\r24upldoc.exe -i 3D852781C134E6EBEEFD8C25A1F9094D 7071624100
- %APPDATA%\3D852781C134E6EBEEFD8C25A1F9094D\local.ini
- %APPDATA%\3D852781C134E6EBEEFD8C25A1F9094D\enemies-names.txt
- %APPDATA%\3D852781C134E6EBEEFD8C25A1F9094D\r24upldoc.exe
- 'my##lw.in':80
- my##lw.in/install.php?do##################################################################################
- my##lw.in/
- DNS ASK s.##folw.in
- DNS ASK my##lw.in
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''