Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run] 'MLGJQEYWH' = '<SYSTEM32>\mscdexnt2.exe'
- '<SYSTEM32>\mscdexnt2.exe'
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\drivetable.txt
- <SYSTEM32>\mscdexnt2.exe
- <SYSTEM32>\mscdexnt2.exe
- '11#.#.231.200':80
- 11#.#.231.200/adfclick
- DNS ASK wp#d
- DNS ASK in###ave.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'