Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '{18B15B7A-D007-34C0-6F3A-8DB0E0161394}' = '"%APPDATA%\Qoqiuv\ezbo.exe"'
- %APPDATA%\Qoqiuv\ezbo.exe
- <SYSTEM32>\ctfmon.exe
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1609' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1406' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4] '1609' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4] '1406' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1] '1406' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0] '1609' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '1609' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1] '1609' = '00000000'
- %APPDATA%\Qoqiuv\o.d
- %APPDATA%\Xizisi\aqda.owf
- %APPDATA%\oemfpc.dat
- %APPDATA%\Qoqiuv\ezbo.exe
- 'ta##usa.com':80
- ta##usa.com/ma/l/ist.dat
- DNS ASK ta##usa.com
- '<IP-адрес в локальной сети>':1034
- ClassName: 'Indicator' WindowName: ''