Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Network Discovery Solutions Modules' = '%APPDATA%\lslcgleesqik\ldshmvvd.exe'
- '%APPDATA%\lslcgleesqik\epsgletemuet.exe' "%APPDATA%\lslcgleesqik\ldshmvvd.exe"
- '%APPDATA%\lslcgleesqik\ldshmvvd.exe'
- %APPDATA%\lslcgleesqik\ldshmvvd.dnf
- %APPDATA%\lslcgleesqik\epsgletemuet.exe
- %APPDATA%\lslcgleesqik\ldshmvvd.exe
- %APPDATA%\lslcgleesqik\ldshmvvd.exe
- 'th####tmeasure.net':80
- 'wa####easure.net':80
- 'th####tdinner.net':80
- 'cr###circle.net':80
- 'su####afraid.net':80
- 'cr###afraid.net':80
- 'su####circle.net':80
- th####tmeasure.net/index.php?em##################################
- wa####easure.net/index.php?em##################################
- th####tdinner.net/index.php?em##################################
- cr###circle.net/index.php?em##################################
- su####afraid.net/index.php?em##################################
- cr###afraid.net/index.php?em##################################
- su####circle.net/index.php?em##################################
- DNS ASK th####tmeasure.net
- DNS ASK wa####easure.net
- DNS ASK th####tdinner.net
- DNS ASK cr###circle.net
- DNS ASK su####afraid.net
- DNS ASK cr###afraid.net
- DNS ASK su####circle.net
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'Indicator' WindowName: '(null)'