Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Nationalvhs] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\Nationaltyn] 'Start' = '00000002'
- 'C:\Server.exe'
- 'C:\ґхЅєЖѕЅєґПЖЫ.exe'
- '<SYSTEM32>\uusmuk.exe'
- 'C:\Server (2).exe'
- 'C:\1.exe'
- '<SYSTEM32>\vipxie.exe'
- C:\Server.exe
- C:\ґхЅєЖѕЅєґПЖЫ.exe
- <SYSTEM32>\uusmuk.exe
- C:\Server (2).exe
- C:\1.exe
- <SYSTEM32>\vipxie.exe
- 'eo####0.codns.com':8956
- 'eo####0.codns.com':1020
- DNS ASK eo####0.codns.com
- ClassName: 'Shell_TrayWnd' WindowName: ''