Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'System Health Monitoring Service Pro' = '"%TEMP%\d8df8dee70a1e2f2.exe"'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] '*System Health Monitoring Service Pro' = '"%TEMP%\d8df8dee70a1e2f2.exe"'
- [<HKLM>\Software\Microsoft\Windows\CurrentVersion\Run] 'System Health Monitoring Service Pro' = '"%TEMP%\d8df8dee70a1e2f2.exe"'
- [<HKLM>\Software\Microsoft\Windows\CurrentVersion\RunOnce] '*System Health Monitoring Service Pro' = '"%TEMP%\d8df8dee70a1e2f2.exe"'
- %TEMP%\d8df8dee70a1e2f2.exe
- http://microsoft.com/
- DNS ASK microsoft.com
- DNS ASK ha###tuga.info
- DNS ASK te###atu.info
- DNS ASK te###ham.biz
- '%TEMP%\d8df8dee70a1e2f2.exe' *
- '%TEMP%\d8df8dee70a1e2f2.exe' ZZZZZZWRWTG