Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'SQLService' = '"%APPDATA%\SQL\SQLService.exe"'
- %HOMEPATH%\Start Menu\Programs\Startup\SQLService.exe
- '%APPDATA%\SQL\SQLService.exe'
- '<SYSTEM32>\wscript.exe' "%APPDATA%\SQL\startup.vbs"
- %TEMP%\dw.log
- %TEMP%\330C5.dmp
- %APPDATA%\SQL\SQLService.exe
- %APPDATA%\SQL\startup.vbs
- %APPDATA%\SQL\startup.vbs
- %APPDATA%\SQL\SQLService.exe
- %HOMEPATH%\Start Menu\Programs\Startup\SQLService.exe
- 'm.####adedit.com':80
- 'ft#.##r0m4x.esy.es':21
- 'wp#d':80
- m.####adedit.com/b043/1420401876512/my.txt
- wp#d/wpad.dat
- DNS ASK m.####adedit.com
- DNS ASK ft#.##r0m4x.esy.es
- DNS ASK wp#d
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''