Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Wbsjmef jbsnticrvsasdfasdfsrtergsds sbdaadffdgvsd 2015] 'ImagePath' = '%ProgramFiles%\Microsoft Bhawaw\Systems32.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Wbsjmef jbsnticrvsasdfasdfsrtergsds sbdaadffdgvsd 2015] 'Start' = '00000002'
- '%ProgramFiles%\Microsoft Bhawaw\Systems32.exe'
- %ProgramFiles%\Microsoft Bhawaw\Systems32.exe
- %ProgramFiles%\Microsoft Bhawaw\Systems32.exe
- 'dd##.#ipddos.com':8898
- DNS ASK dd##.#ipddos.com