Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'XshowXsevenXwindows' = '%HOMEPATH%\Desktop\calc.exe'
- %HOMEPATH%\Desktop\calc.exe
- <LS_APPDATA>\help.txt
- %HOMEPATH%\Desktop\calc.exe
- '71.##6.146.225':80
- 71.##6.146.225/images/co.asp
- ClassName: 'NDDEAgnt' WindowName: 'NetDDE Agent'
- ClassName: 'Indicator' WindowName: ''