Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ATI External Event Utility EXE Module' = '<SYSTEM32>\ati2еvxx.exe'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{CFB8CB66-EAB4-BC7E-D884-B5EB73CAF9D8}] 'StubPath' = '<SYSTEM32>\ati2еvxx.exe'
- %TEMP%\ATI.EXE
- <SYSTEM32>\ctfmon.exe
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\ati2еvxx.exe
- %TEMP%\ATI.EXE
- 'we####ke.dyndns.tv':6001
- DNS ASK we####ke.dyndns.tv
- '<IP-адрес в локальной сети>':1036
- ClassName: 'Shell_TrayWnd' WindowName: ''