Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\7199654.url
- '%HOMEPATH%\Templates\7199654.exe'
- '%TEMP%\QAJMVZXQIKVZQOBORFL.exe'
- '%TEMP%\ZAOSWEBWHFVFDBYEVTI.exe'
- %TEMP%\dw.log
- %TEMP%\2C809.dmp
- %HOMEPATH%\Templates\7199654.exe
- %TEMP%\ZAOSWEBWHFVFDBYEVTI.exe
- %TEMP%\QAJMVZXQIKVZQOBORFL.exe
- 'do####l.olympe.in':80
- do####l.olympe.in/hacked/stub.php
- DNS ASK do####l.olympe.in
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'