Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'dllwin' = '%TEMP%\dllhost32.exe'
- '%TEMP%\dllhost32.exe'
- <LS_APPDATA>\Hewlett-Packard\dllhost32.exe_Url_qzn0ywzvyp2zlpnkbry00uf1hmau4eik\1.0.0.0\gvei50nr.newcfg
- C:\Documents
- %TEMP%\dllhost32.exe
- %TEMP%\dllhost32.exe
- <LS_APPDATA>\Hewlett-Packard\dllhost32.exe_Url_qzn0ywzvyp2zlpnkbry00uf1hmau4eik\1.0.0.0\gvei50nr.newcfg в <LS_APPDATA>\Hewlett-Packard\dllhost32.exe_Url_qzn0ywzvyp2zlpnkbry00uf1hmau4eik\1.0.0.0\user.config
- '3d#####fag.no-ip.info':9007
- DNS ASK 3d#####fag.no-ip.info
- ClassName: 'Indicator' WindowName: '(null)'