Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Host Process' = '"%APPDATA%\Startup\adpres.exe"'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Windows Task' = '"%HOMEPATH%\taskhost.exe"'
- '%APPDATA%\Startup\adpres.exe'
- '%HOMEPATH%\taskhost.exe'
- %APPDATA%\Startup\adpres.exe
- %HOMEPATH%\taskhost.exe
- %TEMP%\~DF6342.tmp
- 'tu####leg.zapto.org':6112
- DNS ASK tu####leg.zapto.org
- ClassName: 'Indicator' WindowName: '(null)'