Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'regedit.exe' = '%APPDATA%\W2VTWFFiQQ==\regedit.exe'
- '%APPDATA%\W2VTWFFiQQ==\regedit.exe'
- '%APPDATA%\W2VTWFFiQQ==\regedit.exe' <Полный путь к вирусу>
- %APPDATA%\W2VTWFFiQQ==\regedit.exe
- %APPDATA%\W2VTWFFiQQ==\regedit.exe
- 'ev####rlander.com':80
- 'an####aunderlis.com':80
- 'mi###irlaver.su':80
- DNS ASK ev####rlander.com
- DNS ASK an####aunderlis.com
- DNS ASK mi###irlaver.su
- ClassName: 'Indicator' WindowName: ''