Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\iprip] 'Start' = '00000002'
- C:\RECYCLER\recyl.exe109187tem.exe
- C:\RECYCLER\recyl.exe /c regedit /s c:\recycler\recyl.exe113375cyl.txt /cc:\recycler\recyl.exe109187tem.exe
- %WINDIR%\regedit.exe /s c:\recycler\recyl.exe113375cyl.txt
- C:\RECYCLER\recyl.exe110625cnna.txt
- C:\RECYCLER\recyl.exe113375cyl.txt
- <SYSTEM32>\Ipripid.dll
- C:\RECYCLER\recyl.exetem.tem
- C:\RECYCLER\recyl.exe
- C:\RECYCLER\recyl.exe109187cnna.txt
- C:\RECYCLER\recyl.exe109187tem.exe
- 'sh##.3322.org':513
- DNS ASK sh##.3322.org
- ClassName: 'RegEdit_RegEdit' WindowName: ''