Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'effaacefaabebgfdgfdgdfg' = '"%ALLUSERSPROFILE%\Application Data\effaacefaabebgfdgfdgdfg.exe"'
- %WINDIR%\Explorer.EXE
- %ALLUSERSPROFILE%\Application Data\effaacefaabebgfdgfdgdfg.exe
- 'na##resi.ru':443
- 'ie##ink.ru':443
- 'yu###elper.ru':443
- DNS ASK na##resi.ru
- DNS ASK ie##ink.ru
- DNS ASK yu###elper.ru
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''