Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Microsoft Help and Support' = 'C:\RECYCLER\S-1-5-21-6970028292-1527740858-548426747-9197\hlpsvc.exe'
- <SYSTEM32>\ctfmon.exe
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\wbem\Performance\WmiApRpl_new.ini
- C:\RECYCLER\S-1-5-21-6970028292-1527740858-548426747-9197\hlpsvc.exe
- C:\RECYCLER\S-1-5-21-6970028292-1527740858-548426747-9197\Desktop.ini
- C:\RECYCLER\S-1-5-21-6970028292-1527740858-548426747-9197\hlpsvc.exe
- DNS ASK hi##en.it
- DNS ASK 0x###dbeef.cn
- 'hi##en.it':24322
- '0x###dbeef.cn':24322
- ClassName: 'Indicator' WindowName: ''