Техническая информация
- [<HKCU>\Software\Microsoft\Active Setup\Installed Components\{Q081SV7T-L8WQ-401G-FVKU-] 'StubPath' = '<LS_APPDATA>\taskhost.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'taskhost.exe' = '<LS_APPDATA>\taskhost.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'taskhost.exe' = '<LS_APPDATA>\taskhost.exe'
- '<LS_APPDATA>\taskhost.exe'
- %TEMP%\DataUser2.dat
- <LS_APPDATA>\SQLite3.dll
- <LS_APPDATA>\taskhost.exe
- 'ow######tamere.no-ip.biz':5666
- DNS ASK ow######tamere.no-ip.biz
- ClassName: 'Indicator' WindowName: '(null)'