Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'SpeedLauncher' = '%CommonProgramFiles%\reader_sl.exe'
- <SYSTEM32>\svchost.exe
- <SYSTEM32>\svchost.exe
- %CommonProgramFiles%\reader_sl.exe
- 'lo###.faceboktw.com':443
- 'lo###.faceboktw.com':80
- lo###.faceboktw.com/child/uh/view?38##################
- DNS ASK lo###.faceboktw.com
- ClassName: 'Indicator' WindowName: ''