Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{utvhqvzj-cihj-iptc-dvct-tkbwazwazdvg}] 'stubpath' = ''
- C:\5.exe
- C:\server.exe
- <SYSTEM32>\inortslka.exe ZhuDongdelC:\server.exe
- C:\3.exe
- C:\2.exe
- C:\1.exe
- C:\server.exe
- C:\AYRTSrv.aye
- C:\5.exe
- <SYSTEM32>\inortslka.exe
- %TEMP%\210562_res.tmp
- <SYSTEM32>\inortslka.exe_lang.ini
- C:\AYTask.aye
- C:\3.exe
- C:\AYUpdSrv.aye
- C:\2.exe
- C:\ALYac.aye
- C:\1.exe
- C:\AYAgent.aye
- C:\server.exe
- %TEMP%\210562_res.tmp в %TEMP%\210609_lang.dll
- 'ck####6.codns.com':2554
- DNS ASK ck####6.codns.com