Техническая информация
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\87b5d34.exe
- %HOMEPATH%\Start Menu\Programs\Startup\87b5d34.exe
- '<SYSTEM32>\vssadmin.exe' Delete Shadows /All /Quiet
- '<SYSTEM32>\svchost.exe' netsvcs
- '%WINDIR%\explorer.exe'
- <SYSTEM32>\svchost.exe
- %WINDIR%\explorer.exe
- 'ku####sda8121.com':80
- DNS ASK ku####sda8121.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: '' WindowName: '(null)'