Техническая информация
- '<SYSTEM32>\schtasks.exe' /create /sc onlogon /tn "admin folder" /rl highest /tr "'%ProgramFiles%\user folder\appupdate.exe' /startup" /f
- <SYSTEM32>\svchost.exe
- %TEMP%\AulT22PH4y1kkX.ufYB
- %TEMP%\default1742628116.atom+xml
- %ProgramFiles%\user folder\appupdate.exe
- %TEMP%\nsh2.tmp\System.dll
- %TEMP%\efcomcentral-universal.min.js
- %TEMP%\income.htm
- %TEMP%\14113872233798144936
- %TEMP%\main1428293418.css
- %TEMP%\kontakt
- 'be######nnornew96.ddns.net':60599
- 'fa####ltd.ddns.net':60599
- DNS ASK be######nnornew96.ddns.net
- DNS ASK fa####ltd.ddns.net