Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MSI30-Beta2' = '%APPDATA%\MSI30-Beta2\MSI30-Beta2.scr'
- %APPDATA%\MSI30-Beta2\MSI30-Beta2.scr
- <SYSTEM32>\svchost.exe
- %WINDIR%\explorer.exe
- %APPDATA%\MSI30-Beta2\MSI30-Beta2.scr
- %APPDATA%\MSI30-Beta2\MSI30-Beta2.scr
- 'we##8582.in':80
- '11#.#11.111.3':80
- '11#.#11.111.4':80
- '11#.#11.111.7':80
- we##8582.in/index.php?r=#####
- 11#.#11.111.4/index.php?r=###
- 11#.#11.111.3/index.php?r=###
- DNS ASK we##8582.in
- '<IP-адрес в локальной сети>':1035
- ClassName: 'Indicator' WindowName: ''