Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'wsdgs' = '%PROGRAM_FILES%\FileFly\Intenat.exe'
- %PROGRAM_FILES%\FileFly\Intenat.exe
- <SYSTEM32>\cmd.exe /c Del.bat
- <Текущая директория>\Del.bat
- %PROGRAM_FILES%\FileFly\Notepad.txt
- %PROGRAM_FILES%\FileFly\Intenat.exe
- 'ws###.3322.org':2000
- DNS ASK ws###.3322.org
- ClassName: '' WindowName: 'wsdgs????'