Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ceaceabcb' = '%APPDATA%\ceaceabcb.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'eebbaeeab' = '%APPDATA%\eebbaeeab.exe'
- '%APPDATA%\ceaceabcb.exe'
- '%APPDATA%\eebbaeeab.exe'
- %APPDATA%\ceaceabcb.exe
- %APPDATA%\eebbaeeab.exe
- '37.##8.91.177':80
- http://37.##8.91.177/onliner/index.php
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''