Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{4A813F05-4135-55DE-32C6-3B4A3B02550B}] 'StubPath' = '<SYSTEM32>\Client.exe'
- '%TEMP%\tmp2.exe'
- '%TEMP%\tmp1.exe'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\Client.exe
- %TEMP%\tmp2.exe
- %TEMP%\tmp1.exe
- %TEMP%\tmp1.exe
- 'bi####h58.mine.nu':8800
- DNS ASK bi####h58.mine.nu
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'