Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'kSFGzNsTAY' = '%APPDATA%\kLQAqSXXam\DkBQAbCaJw.exe'
- %APPDATA%\klqaqsxxam\dkbqabcajw.exe
- %TEMP%\user2.txt
- %APPDATA%\f5b8b3f6\ak.tmp
- %TEMP%\user7
- %TEMP%\user8
- %TEMP%\user2.txt
- %TEMP%\user7
- %TEMP%\user8
- %TEMP%\user7
- %TEMP%\user8
- DNS ASK as###.no-ip.org