Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Pelaa' = '"%APPDATA%\Akexj\pelaa.exe"'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'DisableNotifications' = '00000001'
- '%APPDATA%\Akexj\pelaa.exe'
- <SYSTEM32>\ctfmon.exe
- %WINDIR%\Explorer.EXE
- <LS_APPDATA>\zuima.ulr
- %APPDATA%\Akexj\pelaa.exe
- '11#.#8.179.100':2424
- '18#.#6.106.10':2042
- '68.##4.34.89':1024
- '75.##.87.199':9865
- '92.#2.58.81':4275
- '18#.#34.118.158':4252
- ClassName: 'Indicator' WindowName: '(null)'