Техническая информация
- %WINDIR%\tasks\carhunt.job
- C:\users\clouds~1\appdata\local\temp\byptfnsqfr.exe
- %ALLUSERSPROFILE%\application data\{7f115ebb-9d14-182b-7f11-15ebb9d17aee}\byptfnsqfr.exe
- %ALLUSERSPROFILE%\application data\{7f115ebb-9d14-182b-7f11-15ebb9d17aee}\byptfnsqfr.dat
- DNS ASK ge####ltiple.link
- DNS ASK ce####-ring.info
- ClassName: 'EDIT' WindowName: ''
- 'C:\users\clouds~1\appdata\local\temp\byptfnsqfr.exe'