Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Receiver Bluetooth Helper Remote WWAN' = '%APPDATA%\sblaotagyibs\hutbvykn.exe'
- '%APPDATA%\sblaotagyibs\yvqtcqihgkiu.exe' "%APPDATA%\sblaotagyibs\hutbvykn.exe"
- '%APPDATA%\sblaotagyibs\hutbvykn.exe'
- %APPDATA%\sblaotagyibs\hutbvykn.rtx
- %APPDATA%\sblaotagyibs\yvqtcqihgkiu.exe
- %APPDATA%\sblaotagyibs\hutbvykn.exe
- %APPDATA%\sblaotagyibs\hutbvykn.exe
- 'am####bright.net':80
- 'we####rbright.net':80
- 'am####inside.net':80
- 'we####rinstead.net':80
- 'am####explain.net':80
- 'we####rexplain.net':80
- am####bright.net/index.php?em###############################
- we####rbright.net/index.php?em###############################
- am####inside.net/index.php?em###############################
- we####rinstead.net/index.php?em###############################
- am####explain.net/index.php?em###############################
- we####rexplain.net/index.php?em###############################
- DNS ASK am####inside.net
- DNS ASK we####rbright.net
- DNS ASK th####nstead.net
- DNS ASK we####rinside.net
- DNS ASK am####explain.net
- DNS ASK we####rinstead.net
- DNS ASK am####bright.net
- DNS ASK we####rexplain.net
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'Indicator' WindowName: '(null)'