Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'WWanAPI' = '<LS_APPDATA>\SMIRecovery\WWanAPI.exe'
- '<SYSTEM32>\msiexec.exe'
- <SYSTEM32>\cmd.exe
- <LS_APPDATA>\SMIRecovery\WWanAPI.exe
- <LS_APPDATA>\SMIRecovery\WWanAPI.mui
- %APPDATA%\56745
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\gate[1].htm
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\webhp[1]
- %APPDATA%\56745
- 'mo####pikabu.info':80
- '74.##5.232.51':80
- 74.##5.232.51/webhp
- mo####pikabu.info/gate.php
- DNS ASK mo####pikabu.info
- DNS ASK www.google.com
- ClassName: 'Indicator' WindowName: ''