Техническая информация
- %APPDATA%\microsoft\windows\start menu\programs\startup\endochylous.vbs
- %WINDIR%\microsoft.net\framework\v2.0.50727\regsvcs.exe
- %TEMP%\aut5c81.tmp
- %TEMP%\biopsies
- %LOCALAPPDATA%\anglophile\endochylous.exe
- %TEMP%\aut6364.tmp
- %APPDATA%\0cb67e2f-dc95-45ca-8fb8-69bde8e3f814\run.dat
- %APPDATA%\0cb67e2f-dc95-45ca-8fb8-69bde8e3f814\catalog.dat
- %APPDATA%\0cb67e2f-dc95-45ca-8fb8-69bde8e3f814\storage.dat
- %APPDATA%\0cb67e2f-dc95-45ca-8fb8-69bde8e3f814\settings.bin
- %TEMP%\aut5c81.tmp
- %TEMP%\aut6364.tmp
- '19#.#51.83.44':50050
- '19#.#51.83.44':50050
- '%LOCALAPPDATA%\anglophile\endochylous.exe'
- '%WINDIR%\microsoft.net\framework\v2.0.50727\regsvcs.exe'