Техническая информация
- %WINDIR%\microsoft.net\framework\v4.0.30319\applaunch.exe
- %TEMP%\ixp000.tmp\qi3gm89.exe
- %TEMP%\ixp000.tmp\13sg239.exe
- %TEMP%\ixp001.tmp\11zz5231.exe
- %TEMP%\ixp001.tmp\12uc251.exe
- %TEMP%\ixp001.tmp\12uc251.exe
- %TEMP%\ixp001.tmp\11zz5231.exe
- %TEMP%\ixp000.tmp\13sg239.exe
- %TEMP%\ixp000.tmp\qi3gm89.exe
- '5.##.92.43':80
- 'he###teeakl.pw':80
- http://he###teeakl.pw/api
- DNS ASK he###teeakl.pw
- '%TEMP%\ixp000.tmp\qi3gm89.exe'
- '%TEMP%\ixp001.tmp\11zz5231.exe'
- '%TEMP%\ixp001.tmp\12uc251.exe'
- '%TEMP%\ixp000.tmp\13sg239.exe'
- '%TEMP%\ixp000.tmp\qi3gm89.exe' ' (со скрытым окном)
- '%TEMP%\ixp001.tmp\11zz5231.exe' ' (со скрытым окном)
- '%TEMP%\ixp001.tmp\12uc251.exe' ' (со скрытым окном)
- '%TEMP%\ixp000.tmp\13sg239.exe' ' (со скрытым окном)
- '%WINDIR%\microsoft.net\framework\v4.0.30319\applaunch.exe'