Техническая информация
- '<SYSTEM32>\rundll32.exe' "%TEMP%\ins1.tmp",xncujvchq install
- %TEMP%\ins1.tmp
- 'he###t.co.be':80
- he###t.co.be/vYpVvgZgyrfYy7b19CgpTuLvdqYS32DnJLi9gkKpdh2FbUxg2BEuXOIbyQHoMnfMFuO/0fXzEdoHyw7EtE6luJuPJIFbq0QGrB/U/3g0Sl8=
- he###t.co.be/RrwhnCQrBVE9uyeqHyHOJT4fB5+SFD8k/m8k0Xx2SmbVU1HB6wZ4iAj89lCqiTTuBLYMfK2zo0EGYbQeeTtk+wrSeD4w/EpHMcaQr7mG4cIhmY2LFQ4+XnFKXqfPTnt2CndROZg73EZERJAU6uC+BcmBv/8E9O5SZkRtkOV7EoQ0RDxt7VNIEGyLDBu3MfAfeRYbvqJ6
- DNS ASK he###t.co.be
- ClassName: 'Shell_TrayWnd' WindowName: ''