Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = '%APPDATA%\iarusich.exe'
- '%APPDATA%\iarusich.exe'
- %APPDATA%\iarusich.exe
- %TEMP%\CRNJEUFU - 10-26-2013-3.53.46-PM.gif
- 'ex####.emirates.net.ae':25
- DNS ASK ex####.emirates.net.ae
- ClassName: 'Indicator' WindowName: '(null)'