Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{A47BE168-9ACE-2457-ABD0-3AE14579BDE2}] 'StubPath' = '%WINDIR%\winflame.exe Rs'
- '%WINDIR%\winopen.exe'
- %WINDIR%\winopen.exe
- %WINDIR%\winflame.exe
- 'up####.duimima.com':8088
- 'any':8088
- 'up####.duimima.com':80
- up####.duimima.com/updatelist.txt
- DNS ASK up####.duimima.com