Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Encrypting BranchCache CardSpace WWAN iSCSI' = '<LS_APPDATA>\vbropkbiyb\zyiehsgyxv.exe'
- '<LS_APPDATA>\vbropkbiyb\hfvmxvtltb.exe' "<LS_APPDATA>\vbropkbiyb\zyiehsgyxv.exe"
- '<LS_APPDATA>\vbropkbiyb\zyiehsgyxv.exe'
- <LS_APPDATA>\vbropkbiyb\zyiehsgyxv.ejba
- <LS_APPDATA>\vbropkbiyb\hfvmxvtltb.exe
- <LS_APPDATA>\vbropkbiyb\zyiehsgyxv.exe
- <LS_APPDATA>\vbropkbiyb\hfvmxvtltb.exe
- <LS_APPDATA>\vbropkbiyb\zyiehsgyxv.exe
- 'wo####pecial.net':80
- wo####pecial.net/forum/search.php?em###########################
- DNS ASK pa###flower.net
- DNS ASK fi###flower.net
- DNS ASK pa###minute.net
- DNS ASK sm###corner.net
- DNS ASK wo####pecial.net
- DNS ASK sm####pecial.net
- DNS ASK wo###corner.net
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'Indicator' WindowName: '(null)'