Техническая информация
- [<HKLM>\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run\] 'Windows Update 494959050' = '%WINDIR%\6794218117453634\winfeft.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run\] 'Windows Update 494959050' = '%WINDIR%\6794218117453634\winfeft.exe'
- %WINDIR%\6794218117453634\winfeft.exe
- %WINDIR%\6794218117453634\winfeft.exe
- '18#.#76.27.132':80
- DNS ASK ya##o.com
- '%WINDIR%\6794218117453634\winfeft.exe'