Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'WinDriverFlash' = '<LS_APPDATA>\FlashDriverW\servered.exe'
- C:\Temp\pc.txt
- <LS_APPDATA>\FlashDriverW\servered.exe
- <LS_APPDATA>\FlashDriverW\servered.exe
- 'gu####lay.esy.es':80
- 'wp#d':80
- gu####lay.esy.es/tmps/comm.txt
- gu####lay.esy.es/tmps/pc.txt
- wp#d/wpad.dat
- DNS ASK gu####lay.esy.es
- DNS ASK wp#d
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''