Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '{1D476073-5E7F-AD41-B897-60D4A63F43C6}' = '"%APPDATA%\Kefo\yqham.exe"'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'DisableNotifications' = '00000001'
- '%APPDATA%\Kefo\yqham.exe'
- <Служебный элемент>
- %TEMP%\tmp9c4abb7e.bat
- <LS_APPDATA>\uspu.wuu
- %APPDATA%\Kefo\yqham.exe
- '18#.#23.135.118':23035
- '75.##.131.25':25864
- '99.##3.42.49':26480
- '69.##3.226.70':14774
- '91.##5.11.166':24927
- '19#.#4.127.98':25549
- '41.##.116.84':27165
- ClassName: 'Indicator' WindowName: ''