Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'List TCP/IP Net.Tcp Engine Device Peer Wired' = '%APPDATA%\Roaming\vikbbhglnbkcnw\mhnhfzdna.exe'
- '%APPDATA%\Roaming\vikbbhglnbkcnw\ljmngqg.exe' "%APPDATA%\Roaming\vikbbhglnbkcnw\mhnhfzdna.exe"
- '%APPDATA%\Roaming\vikbbhglnbkcnw\mhnhfzdna.exe'
- %APPDATA%\Roaming\vikbbhglnbkcnw\mhnhfzdna.uj
- %APPDATA%\Roaming\vikbbhglnbkcnw\ljmngqg.exe
- %APPDATA%\Roaming\vikbbhglnbkcnw\mhnhfzdna.exe
- %APPDATA%\Roaming\vikbbhglnbkcnw\mhnhfzdna.exe
- DNS ASK su###rtrust.net
- DNS ASK cr###system.net
- DNS ASK cr###trust.net
- DNS ASK wa###honor.net
- DNS ASK th####thonor.net
- DNS ASK dn#.##ftncsi.com
- DNS ASK cr###honor.net
- DNS ASK su####neither.net
- DNS ASK su####system.net
- DNS ASK cr####either.net
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''