Техническая информация
- '%TEMP%\svchost.exe'
- '%TEMP%\RarSFX0\loadwg.exe'
- <SYSTEM32>\bitmap.bat
- C:\netsign_debuginfo.txt
- %TEMP%\svchost.exe
- %TEMP%\RarSFX0\loadwg.exe
- %TEMP%\RarSFX0\mxdwg.css
- %TEMP%\RarSFX0\mxdwg.ttc
- %TEMP%\svchost.exe
- 'ho###.hxz123.com':88
- DNS ASK ho###.hxz123.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'