Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\liyuhcaisvl serverv tsd] 'Start' = '00000002'
- <SYSTEM32>\liyuhcaisvl.exe
- %TEMP%\80701104.tmp
- %TEMP%\80701104.tmp в <SYSTEM32>\liyuhcaisvl.exe
- '18##.3322.org':8080
- DNS ASK 18##.3322.org
- ClassName: 'Afx:400000:0' WindowName: ''