Техническая информация
- <SYSTEM32>\tasks\ebzwh
- %HOMEPATH%\documents\zp17sb.exe
- %HOMEPATH%\documents\vselog.dll
- %HOMEPATH%\documents\wordpadfilter.db
- %HOMEPATH%\documents\msmplist.dat
- <DRIVERS>\189atohci.sys
- %HOMEPATH%\documents\zp17sb.exe
- %HOMEPATH%\documents\vselog.dll
- %HOMEPATH%\documents\wordpadfilter.db
- %HOMEPATH%\documents\msmplist.dat
- 'yl####.###-cn-beijing.aliyuncs.com':443
- '34.##9.100.209':443
- 'yl####.###-cn-beijing.aliyuncs.com':443
- DNS ASK yl####.###-cn-beijing.aliyuncs.com
- '%HOMEPATH%\documents\zp17sb.exe'
- '<SYSTEM32>\taskeng.exe' {BAF83980-125F-4E8D-BFE6-A01EBE3C524C} S-1-5-21-3691498038-2086406363-2140527554-1000:puhqvva\user:Interactive:[1]
- '%HOMEPATH%\documents\zp17sb.exe' (со скрытым окном)