Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\pdf_reader.lnk
- '%TEMP%\wifi_hotspot.exe'
- '<SYSTEM32>\rundll32.exe' <SYSTEM32>\shell32.dll,OpenAs_RunDLL %TEMP%\idf.pdf
- %TEMP%\h.ico
- %APPDATA%\0FABFBFF000006E488E6680F
- %TEMP%\idf.pdf
- %TEMP%\wifi_hotspot.exe
- 'ne#.##mestoplay.bid':80
- 'my####rnalip.com':80
- http://my####rnalip.com/raw
- http://ne#.##mestoplay.bid/
- DNS ASK ne#.##mestoplay.bid
- DNS ASK my####rnalip.com
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''