Техническая информация
- '<SYSTEM32>\w.exe'
- <SYSTEM32>\d.bin
- <SYSTEM32>\txpxr_77320871113
- <SYSTEM32>\w.exe
- <SYSTEM32>\ms.bin
- <SYSTEM32>\so.bin
- <SYSTEM32>\PerfStringBackup.TMP
- <SYSTEM32>\txpxr_77320871113
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini
- '64.##0.176.66':8392
- '64.#91.44.8':8392
- '17#.#5.105.218':8392
- 'se###nvest.com':8392
- 'fi###obbits.com':8392
- DNS ASK fi###obbits.com
- DNS ASK se###nvest.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'