Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Application Experience' = '%APPDATA%\Microsoft\AeLookupSvi.exe'
- '%APPDATA%\Microsoft\ProfSvc.exe'
- '%APPDATA%\Microsoft\AeLookupSvi.exe'
- %APPDATA%\Microsoft\Windows\9utFfsRdpc\9utFfsRdpc.dat
- %APPDATA%\Microsoft\Windows\9utFfsRdpc\9utFfsRdpc.svr
- %APPDATA%\Microsoft\Windows\9utFfsRdpc\9utFfsRdpc.nfo
- %APPDATA%\Microsoft\ProfSvc.exe
- %APPDATA%\Microsoft\AeLookupSvi.exe
- %APPDATA%\Microsoft\Windows\9utFfsRdpc\9utFfsRdpc.svr
- %APPDATA%\Microsoft\Windows\9utFfsRdpc\9utFfsRdpc.dat
- %APPDATA%\Microsoft\Windows\9utFfsRdpc\9utFfsRdpc.nfo
- %APPDATA%\Microsoft\Windows\9utFfsRdpc\9utFfsRdpc.nfo
- %APPDATA%\Microsoft\ProfSvc.exe
- %APPDATA%\Microsoft\Windows\9utFfsRdpc\9utFfsRdpc.svr
- 'ti####.zapto.org':3333
- 'cy#######ics.chickenkiller.com':3333
- DNS ASK ti####.zapto.org
- DNS ASK cy#######ics.chickenkiller.com
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''