Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\Windows Update.lnk
- '%APPDATA%\Windows\wuapp.exe'
- '%TEMP%\NIB1.tmp'
- '<SYSTEM32>\cmd.exe' /c "%TEMP%\selfRemoval.bat"
- %APPDATA%\Windows\wuapp.exe
- %TEMP%\selfRemoval.bat
- %TEMP%\NIB1.tmp
- %TEMP%\COD2.tmp.pdf
- %TEMP%\NIB1.tmp
- 'ad#####ader.ddns.net':443
- 'www.wi###edia.org':80
- www.wi###edia.org/
- DNS ASK ad#####ader.ddns.net
- DNS ASK www.wi###edia.org
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'WinsUpsCls' WindowName: 'WinsUpsCls'