Техническая информация
- %WINDIR%\syswow64\ms.bin
- %WINDIR%\syswow64\so.bin
- %WINDIR%\syswow64\w.exe
- %WINDIR%\syswow64\d.bin
- %WINDIR%\txpxr_16813315308
- %WINDIR%\txpxr_16813315308
- 'se###nvest.com':8392
- '17#.#5.105.218':8392
- '64.##0.176.66':8392
- '64.#91.44.8':8392
- DNS ASK se###nvest.com
- DNS ASK fi###obbits.com
- ClassName: 'EDIT' WindowName: ''
- '%WINDIR%\syswow64\w.exe'