Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Microsoft Windows Application' = 'C:\ProgramData\3FD13A19.exe'
- 'C:\ProgramData\3FD13A19.exe'
- C:\ProgramData\3FD13A19.exe
- 'sp###easy.net':80
- sp###easy.net/speedtest/upload.php?x=#####
- DNS ASK dn#.##ftncsi.com
- DNS ASK jk##f8.ws
- DNS ASK sp###easy.net
- ClassName: 'Indicator' WindowName: '(null)'