Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Extension' = '%ALLUSERSPROFILE%\Application Data\VExtension\FyPlayer01.exe'
- '%ALLUSERSPROFILE%\Application Data\VExtension\FPlay.exe'
- '%ALLUSERSPROFILE%\Application Data\VExtension\Updater.exe' "http://www.fu####lmizlese.net//MZђ
- '%ALLUSERSPROFILE%\Application Data\VExtension\FyPlayer01.exe'
- '%ALLUSERSPROFILE%\Application Data\VExtension\FPlay.exe' (загружен из сети Интернет)
- %ALLUSERSPROFILE%\Application Data\VExtension\FyPlayer01.exe
- %ALLUSERSPROFILE%\Application Data\VExtension\log_635143508929218750.txt
- %ALLUSERSPROFILE%\Application Data\VExtension\FPlay.exe
- %ALLUSERSPROFILE%\Application Data\VExtension\Updater.exe
- %ALLUSERSPROFILE%\Application Data\VExtension\log_635143508892187500.txt
- %ALLUSERSPROFILE%\Application Data\VExtension\Ionic.Zip.dll
- %ALLUSERSPROFILE%\Application Data\VExtension\System.Data.SQLite.dll
- %ALLUSERSPROFILE%\Application Data\VExtension\log_635143508892187500.txt
- 'www.fu####lmizlese.net':80
- 'wp#d':80
- www.fu####lmizlese.net//MZ%D1%92
- www.fu####lmizlese.net//v.txt
- wp#d/wpad.dat
- DNS ASK www.fu####lmizlese.net
- DNS ASK wp#d
- ClassName: 'Indicator' WindowName: '(null)'