Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] 'AppDataLow' = '%APPDATA%\Microsoft\ehrtgwhs\ivdbwrra.exe'
- %WINDIR%\syswow64\explorer.exe
- %APPDATA%\microsoft\ehrtgwhs\ivdbwrra.exe
- %APPDATA%\microsoft\ehrtgwhs\ivdbwrra.exe
- '5.#.49.12':53
- '19#.#83.98.154':53
- http://ja##.com/en/
- http://ja##.com/
- DNS ASK go.microsoft.com
- DNS ASK msdn.microsoft.com
- DNS ASK support.microsoft.com
- DNS ASK ja##.com
- '%WINDIR%\syswow64\explorer.exe'