Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Intelligent AutoConfig Reports' = '%APPDATA%\Roaming\nflatmy\svomilktjabr.exe'
- '%APPDATA%\Roaming\nflatmy\zqehbquw.exe' "%APPDATA%\Roaming\nflatmy\svomilktjabr.exe"
- '%APPDATA%\Roaming\nflatmy\svomilktjabr.exe'
- %APPDATA%\Roaming\nflatmy\svomilktjabr.gybth
- %APPDATA%\Roaming\nflatmy\zqehbquw.exe
- %APPDATA%\Roaming\nflatmy\svomilktjabr.exe
- %APPDATA%\Roaming\nflatmy\svomilktjabr.exe
- DNS ASK pe####nearly.net
- DNS ASK be####eshare.net
- DNS ASK ma####enearly.net
- DNS ASK ma####ehappen.net
- DNS ASK pe####happen.net
- DNS ASK ex###tshare.net
- DNS ASK be####ehappen.net
- DNS ASK ex####happen.net
- DNS ASK dn#.##ftncsi.com
- DNS ASK be####eshake.net
- DNS ASK ex###tshake.net
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''