Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'effaacefaabebsacfsfdsf' = '"%ALLUSERSPROFILE%\Application Data\effaacefaabebsacfsfdsf.exe"'
- %WINDIR%\Explorer.EXE
- %ALLUSERSPROFILE%\Application Data\effaacefaabebsacfsfdsf.exe
- %TEMP%\logs123.txt
- 'fi###kalus.ru':80
- 'ri###uipn.ru':80
- fi###kalus.ru/power/c1.php
- ri###uipn.ru/power/c1.php
- DNS ASK fi###kalus.ru
- DNS ASK ri###uipn.ru
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''