Техническая информация
- %WINDIR%\tasks\{810401e2-dde0-454e-b0e2-aa89c9e5967c}.job
- <SYSTEM32>\tasks\{810401e2-dde0-454e-b0e2-aa89c9e5967c}
- [HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\] '1601' = '00000000'
- %ALLUSERSPROFILE%\microsoft\crypto\rsa\s-1-5-18\d42cc0c3858a58db2db37658219e6400_8cf7b530-613e-439b-a8c5-ccfc0e745400
- %WINDIR%\eribea.exe
- %WINDIR%\tasks\{810401e2-dde0-454e-b0e2-aa89c9e5967c}.job
- <SYSTEM32>\tasks\{810401e2-dde0-454e-b0e2-aa89c9e5967c}
- DNS ASK wi###eaks.org
- DNS ASK ar####esbase.com
- DNS ASK 10##6.cn
- DNS ASK fi#####.###tings.services.mozilla.com
- DNS ASK my##odo.com
- DNS ASK yo###oggie.com
- '%WINDIR%\eribea.exe'