Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'FEA15F65' = '%APPDATA%\FEA15F65\bin.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'FEA15F65' = '%APPDATA%\FEA15F65\bin.exe'
- '<SYSTEM32>\winver.exe'
- <SYSTEM32>\cscript.exe
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1609' = '00000000'
- %APPDATA%\FEA15F65\bin.exe
- <Текущая директория>\0580
- <Текущая директория>\0580
- 'li####drealtrue.ru':80
- li####drealtrue.ru/newsdrefse/
- DNS ASK li####drealtrue.ru
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''
- ClassName: './' WindowName: './'
- ClassName: '0580' WindowName: '0580'
- ClassName: '' WindowName: ''