Техническая информация
- '<SYSTEM32>\rundll32.exe' "%TEMP%\ins1.tmp",mhqymlmidldbboo install
- <Полный путь к вирусу>
- %TEMP%\ins1.tmp
- 'gr###onn.cz.cc':80
- gr###onn.cz.cc/PvGmocbIiugxrM82GDEAndOENulm+6JFfq6mIiuaUA1R/UM316070toy1pidw9UrUk0n6SP0WE9yCQyYt2JV/96aUGm7scGxeoz7BEWxwtL8rg==
- gr###onn.cz.cc/ibWrSFSgOTB+rAGdjz2RYXEa9RUpn92moNQHrTsAyY+qM7A2sA4cExibMIA8nJl2lRIg4wy/Erb7pzPFQvQQ03Xv/j28a06PjvDsl9aFHE7oSkxqKNTo5sJ3buS5Z8OWiqxqhFS4KZqcEZ2eWlQqtVpcCmHrQqt5R5vINlztq7+uaOpGOPIs+W5OipvCzaeZi2dPdwxBF3c=
- DNS ASK gr###onn.cz.cc
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'