Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'f5a401d13ce89664f55b688269856619' = '"C:\Users\Public\VNHAX VIP V1.5.0.26.exe" ..'
- [<HKLM>\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 'f5a401d13ce89664f55b688269856619' = '"C:\Users\Public\VNHAX VIP V1.5.0.26.exe" ..'
- %APPDATA%\microsoft\windows\start menu\programs\startup\ccleaner.lnk
- C:\users\public\vnhax vip v1.5.0.26.exe
- DNS ASK ch###5.ddns.net
- 'C:\users\public\vnhax vip v1.5.0.26.exe'