Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] ' --_-efc' = '"%HOMEPATH%\--_-efc\ --_-efc.exe"'
- %HOMEPATH%\--_-efc\bitd75b.tmp
- %HOMEPATH%\--_-efc\libeay32.dll
- %HOMEPATH%\--_-efc\ssleay32.dll
- %HOMEPATH%\--_-efc\dbghelp.dll
- %HOMEPATH%\--_-efc\dump.dmp
- %HOMEPATH%\--_-efc\dump2.dmp
- %HOMEPATH%\--_-efc\borlndmm.dll
- %HOMEPATH%\--_-efc\bitd75b.tmp
- %HOMEPATH%\--_-efc\ --_-efc.zip
- %HOMEPATH%\--_-efc\bitd75b.tmp в %HOMEPATH%\--_-efc\ --_-efc.zip
- %HOMEPATH%\--_-efc\dump.dmp в %HOMEPATH%\--_-efc\ --_-efc.dmp
- %HOMEPATH%\--_-efc\dump2.dmp в %HOMEPATH%\--_-efc\ --_-efc.exe
- 'ja######.#3-eu-west-1.amazonaws.com':443
- 'docs.google.com':443
- 'do##########cstext.googleusercontent.com':443
- 'lo####zaip.com.br':443
- 'ja######.#3-eu-west-1.amazonaws.com':443
- 'docs.google.com':443
- 'do##########cstext.googleusercontent.com':443
- 'lo####zaip.com.br':443
- DNS ASK ja######.#3-eu-west-1.amazonaws.com
- DNS ASK docs.google.com
- DNS ASK do##########cstext.googleusercontent.com
- DNS ASK lo####zaip.com.br
- DNS ASK go##e.com
- ClassName: '' WindowName: ''
- '%HOMEPATH%\--_-efc\ --_-efc.exe'
- '<SYSTEM32>\cmd.exe' /c echo %charpool:~14,1%
- '<SYSTEM32>\cmd.exe' /c echo %charpool:~15,1%
- '<SYSTEM32>\cmd.exe' /c echo %charpool:~12,1%
- '%ProgramFiles(x86)%\internet explorer\iexplore.exe'