Техническая информация
- %WINDIR%\tasks\healthrescue.job
- C:\users\clouds~1\appdata\local\temp\qozilj.exe
- %ALLUSERSPROFILE%\application data\{cfc183e9-6eaf-098c-cfc1-183e96ea0fa5}\qozilj.exe
- %ALLUSERSPROFILE%\application data\{cfc183e9-6eaf-098c-cfc1-183e96ea0fa5}\qozilj.dat
- DNS ASK fu###et.link
- DNS ASK al####el-pro.com
- DNS ASK fu###set.work
- DNS ASK gr###model.biz
- ClassName: 'EDIT' WindowName: ''
- 'C:\users\clouds~1\appdata\local\temp\qozilj.exe'