Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'fNUGj94Ty9' = '"%ALLUSERSPROFILE%\Application Data\ifqwz.exe"'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'm3KuU4rZf5' = '"%ALLUSERSPROFILE%\Application Data\ifqwz.exe"'
- %ALLUSERSPROFILE%\Application Data\ifqwz.exe B9F7D40106DC7C9EFBBFE7440D27952F
- %ALLUSERSPROFILE%\Application Data\ifqwz.exe
- %ALLUSERSPROFILE%\Application Data\2Xq88J2e4Mf32
- %ALLUSERSPROFILE%\Application Data\2Xq88J2e4Mf32
- %ALLUSERSPROFILE%\Application Data\ifqwz.exe
- 'pr#####oman1.dyndns.org':6697
- DNS ASK pr#####oman1.dyndns.org
- ClassName: 'Indicator' WindowName: ''