Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Tools Spooler Launcher WMI Human TP Name Host' = '%APPDATA%\Roaming\vxkmaskbbvyyqo\ailwxuqihxmx.exe'
- '%APPDATA%\Roaming\vxkmaskbbvyyqo\wbdbqpgson.exe' "%APPDATA%\Roaming\vxkmaskbbvyyqo\ailwxuqihxmx.exe"
- '%APPDATA%\Roaming\vxkmaskbbvyyqo\ailwxuqihxmx.exe'
- %APPDATA%\Roaming\vxkmaskbbvyyqo\ailwxuqihxmx.tild
- %APPDATA%\Roaming\vxkmaskbbvyyqo\wbdbqpgson.exe
- %APPDATA%\Roaming\vxkmaskbbvyyqo\ailwxuqihxmx.exe
- %APPDATA%\Roaming\vxkmaskbbvyyqo\ailwxuqihxmx.exe
- DNS ASK sw####eparate.net
- DNS ASK le####istant.net
- DNS ASK pr#####yseparate.net
- DNS ASK pr####lyhealth.net
- DNS ASK sw###health.net
- DNS ASK fi####distant.net
- DNS ASK le###health.net
- DNS ASK fi####health.net
- DNS ASK dn#.##ftncsi.com
- DNS ASK le####lothes.net
- DNS ASK fi####clothes.net
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''