Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Windows Service' = '%WINDIR%\system\wuaucldt.exe'
- %WINDIR%\1hsaced0c.txt
- %WINDIR%\hsaced0c.txt
- %WINDIR%\1hsaced0c.txt
- %WINDIR%\hsaced0c.txt
- 'www.ra###ft.com.br':80
- 'www.ba###ranch.com':80
- 'www.uo#.com.br':80
- http://www.ba###ranch.com/_notes/dois.txt
- http://www.ba###ranch.com/_notes/um.txt
- http://www.ra###ft.com.br/0/2/index.php
- DNS ASK www.ra###ft.com.br
- DNS ASK www.ba###ranch.com
- DNS ASK www.uo#.com.br
- ClassName: 'MS_WINHELP' WindowName: ''