Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'qqtxebbe' = '"<LS_APPDATA>\widtnrrb.exe"'
- '<SYSTEM32>\svchost.exe'
- <LS_APPDATA>\widtnrrb.exe
- '94.#2.66.56':443
- '78.##7.209.228':8080
- '18#.#6.250.212':8080
- '91.##2.226.24':8080
- DNS ASK dn#.##ftncsi.com
- ClassName: 'Indicator' WindowName: '(null)'