Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'fjtFyvJPVDI' = '%TEMP%\fjtFyvJPVDI\Update_Service.exe'
- скрытых файлов
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'NoFolderOptions' = '00000001'
- %HOMEPATH%\ukmlHmwXEDCi.txt
- %HOMEPATH%\ukmlHmwXEDCi.txt
- DNS ASK dn#.##ftncsi.com
- DNS ASK cl####s.no-ip.org
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''