Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Spooler Media TPM Cache Files Upgrade Window WMI' = '<LS_APPDATA>\cyiibgsijiiy\aojrnhybxr.exe'
- '<LS_APPDATA>\cyiibgsijiiy\pshziejvz.exe' "<LS_APPDATA>\cyiibgsijiiy\aojrnhybxr.exe"
- '<LS_APPDATA>\cyiibgsijiiy\aojrnhybxr.exe'
- <LS_APPDATA>\cyiibgsijiiy\aojrnhybxr.ua
- <LS_APPDATA>\cyiibgsijiiy\pshziejvz.exe
- <LS_APPDATA>\cyiibgsijiiy\aojrnhybxr.exe
- <LS_APPDATA>\cyiibgsijiiy\pshziejvz.exe
- <LS_APPDATA>\cyiibgsijiiy\aojrnhybxr.exe
- 'ex###twhile.net':80
- 'be####eschool.net':80
- 'ex####school.net':80
- ex###twhile.net/forum/search.php?em##################################
- be####eschool.net/forum/search.php?em##################################
- ex####school.net/forum/search.php?em##################################
- DNS ASK ex####therefore.net
- DNS ASK be####equestion.net
- DNS ASK be#####therefore.net
- DNS ASK ma####eschool.net
- DNS ASK pe####school.net
- DNS ASK be####eschool.net
- DNS ASK ex####school.net
- DNS ASK ex###twhile.net
- DNS ASK ex####question.net
- DNS ASK be####ewhile.net
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'Indicator' WindowName: '(null)'