Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'w1ndows_4523' = '%APPDATA%\w1ndows_4523.exe'
- %APPDATA%\w1ndows_4523.exe
- %APPDATA%\i.txt
- %APPDATA%\c.txt
- %TEMP%\php1.tmp
- %TEMP%\php2.tmp
- %TEMP%\php3.tmp
- '82.##6.48.21':80
- 82.##6.48.21/api.php?co###
- ClassName: 'Indicator' WindowName: '(null)'