Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\svchost] 'Start' = '00000002'
- '%WINDIR%\Utility Mang.exe'
- '%TEMP%\Temp\360±Ј»¤ДЈїй.exe'
- '%TEMP%\Temp\KillBox.exe'
- '<SYSTEM32>\cmd.exe' /c %WINDIR%\Uer.bat
- C:\!KillBox\Logs\kb.log
- %WINDIR%\Utility Mang.exe
- %WINDIR%\Uer.bat
- %TEMP%\Temp\KillBox.exe
- %TEMP%\Temp\360±Ј»¤ДЈїй.exe
- 'qh####3.8866.org':8000
- DNS ASK qh####3.8866.org
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'