Техническая информация
- '<SYSTEM32>\rundll32.exe' "%TEMP%\ins1.tmp",ijuqntdi install
- %TEMP%\ins1.tmp
- 'el###z.ce.ms':80
- el###z.ce.ms/LpwzWBuaoOkcH4VqRUWYf3VF6tazuvOoAI6BHsdaT6zf/Mczr9EauwnQMWFbDCVUJAlNqWTOIu6ZJXx5A9Mm6RUN16AH6lRscVSUYieCOUuIhw==
- el###z.ce.ms/EuJiccJxC9a75vXV+DXsXudMgPjRu1f055o0B4r6JS/52NfOl3hs0xo2t7vb2/CLsTMAN+UkUaYERZag8geoH300BODWAMrth9XcfmbUCJFgbRmlVuia3gyFqbVdcjr5YdzSsWA0MC0nxuEb9KZvgCMnOf+z9VKUOJyH1upYzNAxRisW5R1hgWX5zJYguzNvJmMJSsyPthA=
- DNS ASK el###z.ce.ms
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'