Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'w1ndows_bcf8' = '%APPDATA%\w1ndows_bcf8.exe'
- %APPDATA%\w1ndows_bcf8.exe
- %APPDATA%\i.txt
- %APPDATA%\c.txt
- %TEMP%\php1.tmp
- %TEMP%\php2.tmp
- %TEMP%\php3.tmp
- '82.##6.48.21':80
- 82.##6.48.21/api.php?co###
- ClassName: 'Indicator' WindowName: ''