Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'BVNSEUHJ' = '%APPDATA%\Roaming\UpSysFFPXOMEV.exe'
- '%APPDATA%\Roaming\UpSysFFPXOMEV.exe' "<Полный путь к вирусу>"
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\YIF7DGLM\dll[1].drx
- %APPDATA%\Roaming\UpSysFFPXOMEV.exe
- '19#.#38.231.9':80
- 19#.#38.231.9/bt_acess/bt01/dll.drx
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'TFMAppClass' WindowName: ''
- ClassName: 'OSKMainClass' WindowName: ''