Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'faeolak' = '%HOMEPATH%\faeolak.exe /d'
- скрытых файлов
- '%HOMEPATH%\faeolak.exe'
- %HOMEPATH%\faeolak.exe
- %HOMEPATH%\faeolak.exe
- 'ns#.##ckdates5.com':7008
- 'ns#.##ckdates9.com':7008
- 'ns#.##ckdates1.com':7008
- DNS ASK ns#.##ckdates5.com
- DNS ASK ns#.##ckdates9.com
- DNS ASK ns#.##ckdates1.com
- ClassName: 'Indicator' WindowName: ''