Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'NetWeaveClient' = '%APPDATA%\NetWeave\Client\Client.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'NetWeaveClient' = '%APPDATA%\NetWeave\Client\Client.exe'
- %TEMP%\is-DL374.tmp\hotspot.exe.tmp /SL5="$400DA,1979921,53248,%TEMP%\hotspot.exe"
- %TEMP%\hotspot.exe
- %TEMP%\is-MNMIG.tmp\_isetup\_RegDLL.tmp
- %TEMP%\is-MNMIG.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-DL374.tmp\hotspot.exe.tmp
- %APPDATA%\NetWeave\Client\Client.exe
- %TEMP%\hotspot.exe
- 'cc.###pyrsky.net':1600
- DNS ASK cc.###pyrsky.net
- '<IP-адрес в локальной сети>':1035
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''