Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Connectivity Net.Tcp Extender Cache Block' = 'C:\cocauwixcmwbpx\zehkbqeruux.exe'
- 'C:\cocauwixcmwbpx\avyiludppkth.exe' "c:\cocauwixcmwbpx\zehkbqeruux.exe"
- 'C:\cocauwixcmwbpx\zehkbqeruux.exe'
- 'C:\cocauwixcmwbpx\gj1f4muitjtbtpmsqs.exe'
- C:\cocauwixcmwbpx\zehkbqeruux.exe
- C:\cocauwixcmwbpx\avyiludppkth.exe
- C:\cocauwixcmwbpx\gj1f4muitjtbtpmsqs.exe
- %WINDIR%\cocauwixcmwbpx\gqa9rpjqi
- C:\cocauwixcmwbpx\gqa9rpjqi
- C:\cocauwixcmwbpx\avyiludppkth.exe
- C:\cocauwixcmwbpx\zehkbqeruux.exe
- C:\cocauwixcmwbpx\gj1f4muitjtbtpmsqs.exe
- %WINDIR%\cocauwixcmwbpx\gqa9rpjqi
- 'mo#####tcomplete.net':80
- 'ou####eproud.net':80
- 'bu####ngwelcome.net':80
- 'ou####ecomplete.net':80
- 'mo####ntaround.net':80
- 'ou####ewelcome.net':80
- 'mo####ntproud.net':80
- 'ou####earound.net':80
- http://mo#####tcomplete.net/index.php
- http://ou####eproud.net/index.php
- http://bu####ngwelcome.net/index.php
- http://ou####ecomplete.net/index.php
- http://mo####ntaround.net/index.php
- http://ou####ewelcome.net/index.php
- http://mo####ntproud.net/index.php
- http://ou####earound.net/index.php
- DNS ASK ou####ecomplete.net
- DNS ASK mo#####tcomplete.net
- DNS ASK ev####gwelcome.net
- DNS ASK bu####ngwelcome.net
- DNS ASK ou####eproud.net
- DNS ASK mo####ntaround.net
- DNS ASK ou####ewelcome.net
- DNS ASK mo####ntproud.net
- DNS ASK ou####earound.net
- ClassName: 'Shell_TrayWnd' WindowName: ''