Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'lBq97M' = '%HOMEPATH%\nKk16O\Unknown.exe'
- '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe'
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
- %APPDATA%\imlgs\06-04-2014
- %HOMEPATH%\gQs68E.BM2
- %TEMP%\aut1.tmp
- %HOMEPATH%\gQs68E.BM2
- %HOMEPATH%\gQs68E.BM2
- %TEMP%\aut1.tmp
- 'vc####ol.myftp.biz':27035
- DNS ASK vc####ol.myftp.biz