Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'aksjbnveytr6gfghdhurh' = '%APPDATA%\zzbrenkzx.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Taskman' = '%APPDATA%\zzbrenkzx.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%APPDATA%\zzbrenkzx.exe' = '%APPDATA%\zzbrenkzx.exe:*:Enabled:qu63647assbncvhbsdggh'
- %APPDATA%\zzbrenkzx.exe
- %TEMP%\latos91.exe
- %TEMP%\grine23.exe
- %APPDATA%\fk1xxx.e2ts
- %APPDATA%\zzbrenkzx.exe
- %TEMP%\aut4.tmp
- %TEMP%\aut3.tmp
- %TEMP%\nso2.tmp
- %TEMP%\grine23.exe
- %TEMP%\latos91.exe
- %APPDATA%\zzbrenkzx.exe
- %TEMP%\aut4.tmp
- %APPDATA%\fk1xxx.e2ts
- %TEMP%\aut3.tmp
- 'ab###2.mine.nu':31902
- DNS ASK ab###2.mine.nu
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''