Техническая информация
- '%PROGRAM_FILES%\Server.exe'
- '<SYSTEM32>\D2.exe'
- '<SYSTEM32>\super_mario_flash V 12.4.1 setup.exe'
- '%PROGRAM_FILES%\Server.exe' (загружен из сети Интернет)
- %TEMP%\$inst\4.tmp
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\7.tmp
- %TEMP%\$inst\5.tmp
- <SYSTEM32>\HVMRuntm.dll
- <SYSTEM32>\D2.exe
- %PROGRAM_FILES%\Server.exe
- <SYSTEM32>\super_mario_flash V 12.4.1 setup.exe
- 'rg##st.net':80
- 'wp#d':80
- rg##st.net/download/59145827/3f25b93f2a72d953408e62887c75b159e9e3ad36/start%20up.exe
- wp#d/wpad.dat
- DNS ASK rg##st.net
- DNS ASK wp#d
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''