Техническая информация
- %HOMEPATH%\documents\dosk2x.exe
- %HOMEPATH%\documents\vselog.dll
- %HOMEPATH%\documents\wordpadfilter.db
- %HOMEPATH%\documents\dosk2x.exe
- %HOMEPATH%\documents\vselog.dll
- %HOMEPATH%\documents\wordpadfilter.db
- 'yr####.###-cn-beijing.aliyuncs.com':443
- 'yr####.###-cn-beijing.aliyuncs.com':443
- DNS ASK yr####.###-cn-beijing.aliyuncs.com
- '%HOMEPATH%\documents\dosk2x.exe'
- '<SYSTEM32>\taskeng.exe' {57090EF2-0E65-4E4E-8812-C3F549E654C0} S-1-5-21-3691498038-2086406363-2140527554-1000:vqjmprumedi\user:Interactive:[1]
- '%HOMEPATH%\documents\dosk2x.exe' (со скрытым окном)