Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '{18B15B7A-D007-34C0-6F3A-8DB0E0161394}' = '"%APPDATA%\Suiv\maovq.exe"'
- %APPDATA%\Suiv\maovq.exe
- <SYSTEM32>\ctfmon.exe
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1609' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1406' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4] '1609' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4] '1406' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1] '1406' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0] '1609' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '1609' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1] '1609' = '00000000'
- %APPDATA%\Yvip\aqag.iba
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\ist[1].dat
- %APPDATA%\Suiv\o.d
- %APPDATA%\oemfpc.dat
- %APPDATA%\Suiv\maovq.exe
- 'do###les.net':80
- do###les.net/mb/l/ist.dat
- DNS ASK do###les.net
- ClassName: 'Indicator' WindowName: ''