Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'X-Doc' = '%WINDIR%\xdoc\csrss.exe'
- ClassName: 'TibiaClient' WindowName: ''
- %WINDIR%\xdoc\csrss.exe
- %TEMP%\$mad$res$00000a14$931710$
- 'ex###oject.pl':80
- ex###oject.pl/addresses.php
- DNS ASK ex###oject.pl
- ClassName: 'Indicator' WindowName: ''