Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'svchost' = '%APPDATA%\Files\svchost\task.exe'
- '%APPDATA%\Files\svchost\task.exe'
- '%TEMP%\irani Cracker.exe'
- '%TEMP%\CHaTBUZZ MeTR0 ADD Fl00D.exe'
- %APPDATA%\Files\svchost\task.exe
- %TEMP%\30001.dmp
- %TEMP%\dw.log
- %TEMP%\CHaTBUZZ MeTR0 ADD Fl00D.exe
- %TEMP%\irani Cracker.exe
- 'sm##.gmail.com':587
- 'lb####p.jabbim.cz':5222
- DNS ASK sm##.gmail.com
- DNS ASK lb####p.jabbim.cz
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''