Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'winupdate' = 'rundll32 "<LS_APPDATA>\winnewdll.dll",run'
- <SYSTEM32>\rundll32.exe winnewdll.dll,run
- <LS_APPDATA>\winnewdll.dll
- <Текущая директория>\winnewdll.dll
- <Текущая директория>\winnewdll.dll
- 'me####rtzsp.com.br':80
- me####rtzsp.com.br/radios/portateis/modelos/TALKABOUT/acessorios/php/add.php
- DNS ASK me####rtzsp.com.br
- ClassName: 'Indicator' WindowName: ''