Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\00.exe
- '%TEMP%\KMS Server.exe'
- '%TEMP%\00.exe'
- %TEMP%\aut2.tmp
- %TEMP%\KMS Server.exe
- %TEMP%\aut1.tmp
- %TEMP%\00.exe
- %TEMP%\aut2.tmp
- %TEMP%\aut1.tmp
- 'up.###-point.com':80
- 'wp#d':80
- up.###-point.com/uploads/ff33cb72b13b10.jpg
- wp#d/wpad.dat
- DNS ASK up.###-point.com
- DNS ASK wp#d
- ClassName: 'Shell_TrayWnd' WindowName: ''