Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'jitc' = '%APPDATA%\Microsoft\XMMC\taskhostsys.exe'
- '%APPDATA%\Microsoft\XMMC\taskhostsys.exe'
- %APPDATA%\Microsoft\XMMC\cygwin32\srv_x86.bin
- %APPDATA%\Microsoft\XMMC\ffx\aeinv.sys
- %APPDATA%\Microsoft\XMMC\taskhostsys.exe
- %APPDATA%\Microsoft\XMMC\cygwin32\nthserv.exe
- %APPDATA%\Microsoft\XMMC\winnt32.dat
- %APPDATA%\Microsoft\XMMC\lust\nt32.dmp
- %APPDATA%\Microsoft\XMMC\openssh\msys.exe
- %APPDATA%\Microsoft\XMMC\taskhostsys.exe
- 'mv###.zapto.org':80
- http://mv###.zapto.org/odin/si.php?ge#####################
- DNS ASK mv###.zapto.org