Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\WinHelp32] 'Start' = '00000002'
- '%WINDIR%\iigkie.exe'
- '%TEMP%\NewRat_se.exe'
- '%TEMP%\ЅЗЗа±в.exe'
- %TEMP%\vba.ini
- %WINDIR%\iigkie.exe
- %TEMP%\ЅЗЗа±в.exe
- %TEMP%\NewRat_se.exe
- %TEMP%\NewRat_se.exe в %TEMP%\214494
- 'wk####0.no-ip.org':80
- DNS ASK wk####0.no-ip.org
- ClassName: 'Shell_TrayWnd' WindowName: ''