Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Cbwgwi' = '%APPDATA%\Cbwgwi.exe'
- <SYSTEM32>\cscript.exe
- %APPDATA%\Cbwgwi.exe
- 'dn##.com':7200
- 'di####l1012.info':7200
- 'ap#.##pmania.com':80
- ap#.##pmania.com/
- DNS ASK dn##.com
- DNS ASK di####l1012.info
- DNS ASK ap#.##pmania.com
- ClassName: 'Indicator' WindowName: ''