Техническая информация
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '37d1a075' = '%PROGRAMDATA%\Intel\Wireless\3e21251\3008503.exe %PROGRAMDATA%\Intel\Wireless\3e21251\0a38424.au3'
- 'C:\efxtrqqj\bmtmntxx.exe' qkkvtftt.au3
- %WINDIR%\syswow64\notepad.exe
- C:\efxtrqqj\bmtmntxx.exe
- C:\efxtrqqj\pe.bin
- C:\efxtrqqj\qkkvtftt.au3
- %TEMP%\torrent.txt
- %PROGRAMDATA%\intel\wireless\3e21251\7236387\2e2d620
- %PROGRAMDATA%\intel\wireless\3e21251\0a38424.au3
- %PROGRAMDATA%\intel\wireless\3e21251\3008503.exe
- %PROGRAMDATA%\intel\wireless\3e21251\pe.bin
- %PROGRAMDATA%\intel\wireless\3e21251\7236387\5335237
- %TEMP%\torrent.txt
- C:\efxtrqqj\qkkvtftt.au3
- C:\efxtrqqj\bmtmntxx.exe
- C:\efxtrqqj\pe.bin
- http://www.me####orrentt.org/uploads/torrents/peliculas/kodt.torrent
- http://www.me####orrentt.org/uploads/torrents/series/kodt.torrent
- http://www.me####orrentt.org/uploads/torrents/documentales/kodt.torrent
- http://www.me####orrentt.org/uploads/torrents/musica/kodt.torrent
- http://www.me####orrentt.org/uploads/torrents/juegos/kodt.torrent
- http://www.me####orrentt.org/uploads/torrents/variados/kodt.torrent
- http://bc.#####sercontent.nl:9994/
- http://bc.#####sercontent.nl:2360/
- DNS ASK me####orrentt.org
- DNS ASK bc.####usercontent.nl
- 'C:\efxtrqqj\bmtmntxx.exe' qkkvtftt.au3' (со скрытым окном)
- '%WINDIR%\syswow64\notepad.exe' ' (со скрытым окном)
- '%WINDIR%\syswow64\notepad.exe'