Техническая информация
- %WINDIR%\syswow64\upnpcont.exe
- D:\$recycle.bin\s-1-5-21-1960123792-2022915161-3775307078-1001\desktop.tmp
- D:\$recycle.bin\s-1-5-21-1960123792-2022915161-3775307078-1001\16ac007d.tmp
- D:\$recycle.bin\s-1-5-21-1960123792-2022915161-3775307078-1001\f4087ffa.tmp
- D:\$recycle.bin\s-1-5-21-1960123792-2022915161-3775307078-1001\375b52d1.tmp
- '43.##9.194.66':8860
- 'fw##.73bbk.com':8899
- http://43.###.194.66:8860/down/yx01up.txt via 43.##9.194.66
- http://fw##.#3bbk.com:8899/e8uchs5.exe via fw##.73bbk.com
- DNS ASK fw##.73bbk.com
- '%WINDIR%\syswow64\logagent.exe'
- '<SYSTEM32>\rundll32.exe' <SYSTEM32>\FirewallControlPanel.dll,ShowNotificationDialog /configure /ETOnly 0 /OnProfiles 6 /OtherAllowed 0 /OtherBlocked 0 /OtherEdgeAllowed 0 /NewBlocked 4 "%WINDIR%\syswow64\logagent.exe"
- '%WINDIR%\syswow64\tstheme.exe'
- '%WINDIR%\syswow64\upnpcont.exe'
- '%WINDIR%\syswow64\rundll32.exe' "D:\$RECYCLE.BIN\S-1-5-21-1960123792-2022915161-3775307078-1001\375B52D1.tmp" Install