Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Miqkbu iafeua] 'Start' = '00000002'
- '%PROGRAM_FILES%\Rualwp yqkqg\Giaokjk.exe'
- '<SYSTEM32>\wscript.exe' "C:\6268.vbs"
- ClassName: 'OLLYDBG' WindowName: ''
- ClassName: 'FileMonClass' WindowName: ''
- C:\6268.vbs
- %PROGRAM_FILES%\Rualwp yqkqg\Giaokjk.exe
- C:\6268.vbs
- '79####069.f3322.org':8000
- DNS ASK 79####069.f3322.org
- ClassName: '18467-41' WindowName: ''