Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '207986d1dbc5156957b7218c11a59431' = '"%APPDATA%\DeepSeaSetup.exe" ..'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '207986d1dbc5156957b7218c11a59431' = '"%APPDATA%\DeepSeaSetup.exe" ..'
- %HOMEPATH%\Start Menu\Programs\Startup\207986d1dbc5156957b7218c11a59431.exe
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%APPDATA%\DeepSeaSetup.exe' = '%APPDATA%\DeepSeaSetup.exe:*:Enabled:De...
- '%APPDATA%\DeepSeaSetup.exe'
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%APPDATA%\DeepSeaSetup.exe" "DeepSeaSetup.exe" ENABLE
- '%TEMP%\is-CGQH0.tmp\DeepSeaSet.tmp' /SL5="$40036,5181817,136704,%TEMP%\DeepSeaSet.exe"
- '%TEMP%\DeepSeaSet.exe'
- '%TEMP%\deepsea.exe'
- %TEMP%\is-NPH81.tmp\isxdl.dll
- %TEMP%\is-NPH81.tmp\DeepSea.Setup.dll
- %APPDATA%\DeepSeaSetup.exe
- %TEMP%\is-NPH81.tmp\_isetup\_shfoldr.dll
- %TEMP%\DeepSeaSet.exe
- %TEMP%\deepsea.exe
- %TEMP%\is-CGQH0.tmp\DeepSeaSet.tmp
- 'ma#####sory.ddns.net':5552
- DNS ASK ma#####sory.ddns.net
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''