Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'kawacs32.exe' = '<LS_APPDATA>\kawacs32.exe'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{15B5F7C1-DF83-4F06-841F-02B4DAF4853A}] 'StubPath' = '<LS_APPDATA>\kawacs32.exe'
- '<LS_APPDATA>\kawacs32.exe'
- '<SYSTEM32>\cmd.exe' /c ""<LS_APPDATA>\melt.bat" "
- <LS_APPDATA>\melt.bat
- <LS_APPDATA>\kawacs32.exe
- 'sh######ends.on-the-web.tv':1005
- '17#.#2.2.123':1005
- 'localhost':1005
- DNS ASK up########srv057748-eu.from-mn.com
- DNS ASK sh######ends.on-the-web.tv
- ClassName: 'Indicator' WindowName: '(null)'