Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'kmyshare.exe' = '%APPDATA%\Microsoft\kmyshare.exe'
- <SYSTEM32>\cscript.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\cacb7094[1].htm
- %APPDATA%\2591055.bat
- %APPDATA%\Microsoft\kmyshare.exe
- %APPDATA%\Microsoft\kmyshare.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\cacb7094[1].htm
- 'hu###ckers.org':80
- 'in##ryou.pw':80
- 'fl###game.eu':80
- 'fl###games.eu':80
- hu###ckers.org/88e6680f/cacb7094/
- in##ryou.pw/88e6680f/cacb7094/
- fl###game.eu/88e6680f/cacb7094/
- fl###games.eu/88e6680f/cacb7094/
- DNS ASK hu###ckers.org
- DNS ASK in##ryou.pw
- DNS ASK fl###game.eu
- DNS ASK fl###games.eu
- ClassName: 'Indicator' WindowName: '(null)'