Техническая информация
- %WINDIR%\tasks\statmaster.job
- <SYSTEM32>\tasks\statmaster
- [<HKLM>\System\CurrentControlSet\Services\Intelligent Brood] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\Intelligent Brood] 'ImagePath' = '%APPDATA%\Intelligent Brood\Intelligent Brood.exe'
- %PROGRAMDATA%\{16507e03-53cc-7e9e-1650-07e0353cf80d}\<Имя файла>.exe
- %PROGRAMDATA%\{16507e03-53cc-7e9e-1650-07e0353cf80d}\<Имя файла>.dat
- %APPDATA%\intelligent brood\intelligent brood.exe
- %APPDATA%\intelligent brood\am.dat
- DNS ASK fu###et.link
- DNS ASK al####el-pro.com
- DNS ASK ri###ynorth.biz
- DNS ASK mo###odel.biz
- '%APPDATA%\intelligent brood\intelligent brood.exe'