Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Runitel' = '%APPDATA%\0bO8hxE4kZOnc5EPea8n\nJhBvCxW\4.0.2.7\Runitel\Runitel.exe'
- %TEMP%\JuKiHyGfr\Qt5Widgets.dll
- %TEMP%\JuKiHyGfr\ssleay32.dll
- %TEMP%\JuKiHyGfr\Qt5Network.dll
- %TEMP%\JuKiHyGfr\Qt5WebSockets.dll
- %TEMP%\JuKiHyGfr\vccorlib120.dll
- %TEMP%\JuKiHyGfr\JuKiHyGfr.vbs
- %APPDATA%\0bO8hxE4kZOnc5EPea8n\nJhBvCxW\4.0.2.7\Runitel\Runitel.exe
- %TEMP%\JuKiHyGfr\Qt5Core.dll
- <LS_APPDATA>\JuKiHyGfr\miners.ini
- %TEMP%\JuKiHyGfr\JuKiHyGfr.exe
- %TEMP%\JuKiHyGfr\cudart64_80.dll
- %TEMP%\JuKiHyGfr\platforms\qwindows.dll
- %TEMP%\JuKiHyGfr\imageformats\qico.dll
- %TEMP%\JuKiHyGfr\libeay32.dll
- %TEMP%\JuKiHyGfr\OpenCL.dll
- %TEMP%\JuKiHyGfr\Qt5Gui.dll
- %TEMP%\JuKiHyGfr\msvcp120.dll
- %TEMP%\JuKiHyGfr\msvcr120.dll
- 'xm####rvices.net':80
- 'wp#d':80
- http://xm####rvices.net/2/10.dll
- http://xm####rvices.net/2/11.dll
- http://xm####rvices.net/2/8.dll
- http://xm####rvices.net/2/9.dll
- http://xm####rvices.net/2/14.dll
- http://xm####rvices.net/2/15.dll
- http://xm####rvices.net/2/12.dll
- http://xm####rvices.net/2/13.dll
- http://xm####rvices.net/2/2.dll
- http://xm####rvices.net/2/3.dll
- http://11#.#11.111.1/wpad.dat via wp#d
- http://xm####rvices.net/2/1.dll
- http://xm####rvices.net/2/6.dll
- http://xm####rvices.net/2/7.dll
- http://xm####rvices.net/2/4.dll
- http://xm####rvices.net/2/5.dll
- DNS ASK xm####rvices.net
- DNS ASK wp#d