Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'SoftupNotify.exe' = '%ALLUSERSPROFILE%\ЎёїЄКјЎ№ІЛµҐ\ЗїБ¦Р¶ФШµзДФЙПµДИнјю.lnk'
- '%WINDIR%\Temp\aa.exe'
- %WINDIR%\Temp\aa.exe
- %WINDIR%\Temp\我的大肚照.JPG
- 'so####8.meibu.net':2013
- DNS ASK so####8.meibu.net
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'