Техническая информация
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\Wingin.lnk
- %HOMEPATH%\Start Menu\Programs\Startup\Wingin.lnk
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\root[1].php
- <LS_APPDATA>\MZ?
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\root[1].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\root[1].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\root[1].php
- 'fi####ssociate.net':80
- fi####ssociate.net/crest/CRNJEUFU/MZ?
- fi####ssociate.net/crest/root.php?cn#########################
- DNS ASK fi####ssociate.net