Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ChromeUpdate' = '%APPDATA%\ChromeUpdate.exe'
- <SYSTEM32>\svchost.exe
- iexplore.exe
- <SYSTEM32>\ctfmon.exe
- %ALLUSERSPROFILE%\Application Data\@system.att
- %ALLUSERSPROFILE%\Application Data\@system2.att
- %APPDATA%\ChromeUpdate.exe
- %ALLUSERSPROFILE%\Application Data\wrnhoah.tmp
- 'hn#####skdnoefefk.com':80
- 'www.te##ze.com':80
- hn#####skdnoefefk.com/image/main.ico
- www.te##ze.com/geoip
- DNS ASK hn#####skdnoefefk.com
- DNS ASK www.te##ze.com
- '95.##1.73.249':8080
- '17#.#02.38.69':8080
- '95.##1.73.249':101
- '17#.#02.38.72':8080
- ClassName: 'Indicator' WindowName: ''