Техническая информация
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Windows] 'run' = 'c:\npfuzgcqp\start.lnk'
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\start.lnk
- 'C:\npfuzgcqp\csrss.exe' "c:\npfuzgcqp\mydat.dll",InitSkin
- C:\npfuzgcqp\start.lnk
- C:\npfuzgcqp\csrss.exe
- C:\npfuzgcqp\mydat.dll
- 'v.##yf.com':8086
- '11#.#4.197.242':5633
- '67.##8.129.227':805
- DNS ASK v.##yf.com