Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'fgn+oDgB3+85jAIKPIuwRKjhgrsxtIACaW01usiOZmI=' = '/JyVCddvUa/Yi3687lt/3nZiM8hiW10H0cvwzvCPnuM=\5KoCDR4CHBFc16sFJmgqRDbIGa8PC5cfN9oYnZZOD+c='
- %TEMP%\31704.dmp
- %TEMP%\dw.log
- C:\JyVCddvUa\Yi3687lt\3nZiM8hiW10H0cvwzvCPnuM=\5KoCDR4CHBFc16sFJmgqRDbIGa8PC5cfN9oYnZZOD+c=
- C:\JyVCddvUa\Yi3687lt\3nZiM8hiW10H0cvwzvCPnuM=\5KoCDR4CHBFc16sFJmgqRDbIGa8PC5cfN9oYnZZOD+c=
- %TEMP%\31704.dmp
- 'fr###eoip.net':80
- fr###eoip.net/xml/
- DNS ASK fr###eoip.net