Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'KB942288-v3' = '%APPDATA%\KB942288-v3\KB942288-v3.com'
- %APPDATA%\KB942288-v3\KB942288-v3.com
- <SYSTEM32>\svchost.exe
- %WINDIR%\explorer.exe
- <SYSTEM32>\svchost.exe
- %WINDIR%\explorer.exe
- %APPDATA%\KB942288-v3\KB942288-v3.com
- %APPDATA%\KB942288-v3\KB942288-v3.com
- 'ho###ryexpo.in':80
- '11#.#11.111.8':80
- '11#.#11.111.7':80
- '11#.#11.111.2':80
- 11#.#11.111.8/index.php?r=###
- 11#.#11.111.2/index.php?r=###
- DNS ASK ho###ryexpo.in
- ClassName: 'Indicator' WindowName: ''