Техническая информация
Для обеспечения автозапуска и распространения:
Создает или изменяет следующие файлы:
- %WINDIR%\Tasks\{BBAEAEAF-1275-40e2-BD6C-BC8F88BD114A}.job
Изменения в файловой системе:
Присваивает атрибут 'скрытый' для следующих файлов:
- %WINDIR%\Tasks\{BBAEAEAF-1275-40e2-BD6C-BC8F88BD114A}.job
Сетевая активность:
Подключается к:
- 'my##tz.com':80
TCP:
Запросы HTTP POST:
- my##tz.com/
UDP:
- DNS ASK wa####gtonpost.com
- DNS ASK my##tz.com
- DNS ASK hu##ng.com
- DNS ASK to#.com
Другое:
Ищет следующие окна:
- ClassName: '2085727501' WindowName: '1665374533'
- ClassName: '1392607410' WindowName: '117444993'
- ClassName: '1502769057' WindowName: '1316730409'
- ClassName: '1169262858' WindowName: '192781113'
- ClassName: '951413304' WindowName: '1007957274'
- ClassName: '1479233396' WindowName: '897393483'
- ClassName: '193578826' WindowName: '1456181366'
- ClassName: '796274665' WindowName: '760453010'
- ClassName: '1152003683' WindowName: '710834164'
- ClassName: '1351778722' WindowName: '1120703534'
- ClassName: '469691841' WindowName: '2091035849'
- ClassName: '1187552846' WindowName: '1107826061'
- ClassName: '513218584' WindowName: '103029370'
- ClassName: '277245699' WindowName: '1006517012'
- ClassName: '1222119902' WindowName: '1550275930'
- ClassName: '1744732465' WindowName: '1546014201'
- ClassName: '1824996290' WindowName: '1422981329'
- ClassName: '2048958797' WindowName: '809459334'
- ClassName: '494969802' WindowName: '1582292726'
- ClassName: '100635606' WindowName: '1022410547'
- ClassName: '1632766057' WindowName: '1178653201'
- ClassName: '1981442611' WindowName: '1592189699'
- ClassName: '643174815' WindowName: '767875104'
- ClassName: '438228731' WindowName: '2102386921'
- ClassName: '1199805577' WindowName: '914182324'
- ClassName: '1425925038' WindowName: '668184171'
- ClassName: '25298325' WindowName: '1864070125'
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: '1259667373' WindowName: '950974054'
- ClassName: '1016315478' WindowName: '62607792'
- ClassName: '1721342343' WindowName: '1080696743'
- ClassName: '1814251630' WindowName: '226879533'
- ClassName: '139966662' WindowName: '1597044192'
- ClassName: '1803310192' WindowName: '1686383671'
- ClassName: '81831870' WindowName: '550863032'
- ClassName: '254827568' WindowName: '553570034'
- ClassName: '25936774' WindowName: '1824812450'
- ClassName: '1683706839' WindowName: '1875395898'
- ClassName: '2098669830' WindowName: '1658022178'
- ClassName: '1883759193' WindowName: '619566018'
- ClassName: '2135141315' WindowName: '1661447382'
- ClassName: '1437463771' WindowName: '1703360587'
- ClassName: '598595506' WindowName: '724927103'
- ClassName: '906805660' WindowName: '318274062'
- ClassName: '428852531' WindowName: '1729718273'
- ClassName: '1286850225' WindowName: '2072701820'
- ClassName: '1571810821' WindowName: '727367198'
- ClassName: '1609725662' WindowName: '402886749'
- ClassName: '2100580078' WindowName: '1513146026'
- ClassName: '1752731994' WindowName: '405127879'
- ClassName: '1013056582' WindowName: '307671395'
- ClassName: '855415712' WindowName: '540134434'
- ClassName: '1041087200' WindowName: '698919525'
- ClassName: '242457602' WindowName: '1489458700'
- ClassName: '1742941880' WindowName: '1766804892'
- ClassName: '2071917958' WindowName: '1145857954'
- ClassName: '1529554900' WindowName: '1930288427'
- ClassName: '183744103' WindowName: '1410347015'
- ClassName: '2110878966' WindowName: '1428071634'
- ClassName: '1358370282' WindowName: '125623193'
- ClassName: '716618380' WindowName: '1176901310'
- ClassName: '1458562639' WindowName: '401653648'
- ClassName: '287219246' WindowName: '144790251'
- ClassName: '566703238' WindowName: '942497952'
- ClassName: '1465777178' WindowName: '1672206470'
- ClassName: '1745714556' WindowName: '1424238963'
- ClassName: '672793221' WindowName: '1912267419'
- ClassName: '562170328' WindowName: '1197593402'
- ClassName: '361176270' WindowName: '1962298378'
- ClassName: '546511740' WindowName: '1022344046'
- ClassName: '2102624639' WindowName: '292276610'
- ClassName: '1682616896' WindowName: '325517125'
- ClassName: '1860628768' WindowName: '1407450023'
- ClassName: '17363700' WindowName: '1578553542'
- ClassName: '1299496144' WindowName: '657438231'
- ClassName: '1025707787' WindowName: '432879929'
- ClassName: '1177602730' WindowName: '885793111'
- ClassName: '1984689725' WindowName: '476301110'
- ClassName: '1622573129' WindowName: '1342613873'
- ClassName: '1629712166' WindowName: '1614645701'
- ClassName: '555631272' WindowName: '490631501'
- ClassName: '1405471961' WindowName: '1532078660'
- ClassName: '19129494' WindowName: '1615139056'
- ClassName: '899354420' WindowName: '495083014'
- ClassName: '478250719' WindowName: '252912224'
