Техническая информация
- %WINDIR%\tasks\{810401e2-dde0-454e-b0e2-aa89c9e5967c}.job
- <SYSTEM32>\tasks\{810401e2-dde0-454e-b0e2-aa89c9e5967c}
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\] '1601' = '00000000'
- %WINDIR%\ubexoa.exe
- %WINDIR%\tasks\{810401e2-dde0-454e-b0e2-aa89c9e5967c}.job
- <SYSTEM32>\tasks\{810401e2-dde0-454e-b0e2-aa89c9e5967c}
- 'hs###rary.com':80
- http://hs###rary.com/1wave.php
- DNS ASK ke###ovies.com
- DNS ASK go##le.ro
- DNS ASK z5#.net
- DNS ASK ha###uit.com
- DNS ASK hs###rary.com
- DNS ASK to##aj.com
- '%WINDIR%\ubexoa.exe'