Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '0158F476-7324-41FD-BE53-3CF9E6028BBC' = '%APPDATA%\{0158F476-7324-41FD-BE53-3CF9E6028BBC}\Msascue.exe'
- '%APPDATA%\{0158F476-7324-41FD-BE53-3CF9E6028BBC}\Msascue.exe'
- %APPDATA%\{0158F476-7324-41FD-BE53-3CF9E6028BBC}\Msascue.exe
- 'be###.zerem.info':80
- 'wp#d':80
- wp#d/wpad.dat
- be###.zerem.info/bky/add-log
- be###.zerem.info/bky/get-inst
- DNS ASK be###.zerem.info
- DNS ASK wp#d
- ClassName: 'Indicator' WindowName: '(null)'