Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Windows Service' = '%WINDIR%\system\wuaucldt.exe'
- %WINDIR%\1hsaced0c.txt
- %WINDIR%\hsaced0c.txt
- %WINDIR%\1hsaced0c.txt
- %WINDIR%\hsaced0c.txt
- 'www.ra###ft.com.br':80
- 'www.go###e.com.br':80
- http://www.ra###ft.com.br/dois.txt
- http://www.ra###ft.com.br/um.txt
- http://www.ra###ft.com.br/0/3/index.php
- DNS ASK www.ra###ft.com.br
- DNS ASK www.go###e.com.br
- ClassName: 'MS_WINHELP' WindowName: ''