Техническая информация
- '%TEMP%\kughoqj2fAJ29PFaj2pfMA2kughoqj2fAJ29PFaj2pfMA2\310714_o.exe'
- '%TEMP%\kughoqj2fAJ29PFaj2pfMA2kughoqj2fAJ29PFaj2pfMA2\310714_o.exe' (загружен из сети Интернет)
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
- %TEMP%\kughoqj2fAJ29PFaj2pfMA2kughoqj2fAJ29PFaj2pfMA2\310714_o.exe
- %TEMP%\nso2.tmp
- <SYSTEM32>\PerfStringBackup.TMP
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini
- 'www.no##ake.me':80
- 'localhost':1040
- 'www.fi##treq.me':80
- www.no##ake.me/8GJma2
- www.fi##treq.me/310714d/310714_o.exe
- DNS ASK www.no##ake.me
- DNS ASK www.fi##treq.me
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''