Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '969e519dd0d9b410e55cba88cb8f0d68' = '"%TEMP%\daen.exe" ..'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '969e519dd0d9b410e55cba88cb8f0d68' = '"%TEMP%\daen.exe" ..'
- %HOMEPATH%\Start Menu\Programs\Startup\969e519dd0d9b410e55cba88cb8f0d68.exe
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%TEMP%\daen.exe' = '%TEMP%\daen.exe:*:Enabled:daen.exe'
- '%TEMP%\daen.exe'
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%TEMP%\daen.exe" "daen.exe" ENABLE
- %TEMP%\daen.exe
- 'ab#####saham.no-ip.info':15
- DNS ASK ab#####saham.no-ip.info
- ClassName: 'Indicator' WindowName: ''