Техническая информация
- '%TEMP%\RarSFX1\Server.exe'
- '%TEMP%\RarSFX0\Server.sfx.exe' -plove1man -d<LS_APPDATA>\Temp
- %TEMP%\RarSFX1\Server.exe
- %TEMP%\850267.bat
- %TEMP%\RarSFX0\fud.bat
- %TEMP%\RarSFX0\Server.sfx.exe
- %TEMP%\RarSFX0\Server.sfx.exe
- %TEMP%\RarSFX0\fud.bat
- %TEMP%\RarSFX1\Server.exe
- 'uc##.fh2web.com':80
- uc##.fh2web.com/secure/secure.php
- DNS ASK uc##.fh2web.com
- ClassName: 'OleMainThreadWndClass' WindowName: ''
- ClassName: 'EDIT' WindowName: ''