Техническая информация
- [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] '1RcTFD' = '%LOCALAPPDATA%\Microsoft\Windows\wlbxitn.exe'
- %WINDIR%\syswow64\svchost.exe
- %LOCALAPPDATA%\microsoft\windows\wlbxitn.exe
- %TEMP%\pnnbprzgm.tmp
- %TEMP%\pnnbprzgm.tmp
- '10#.#70.13.75':80
- '%WINDIR%\syswow64\svchost.exe'