Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Wmjxkq nuslck] 'Start' = '00000002'
- '%WINDIR%\nobodi.exe'
- 'C:\Wifjgs.exe'
- '<SYSTEM32>\wscript.exe' "C:\1682.vbs"
- '<SYSTEM32>\wscript.exe' "C:\2220.vbs"
- %WINDIR%\nobodi.exe
- C:\1682.vbs
- C:\Wifjgs.exe
- C:\2220.vbs
- C:\1682.vbs
- C:\Wifjgs.exe
- C:\2220.vbs
- 'www.is##id.com':60990
- DNS ASK www.is##id.com