Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Sharing Client Secondary Shell IPsec Awareness' = '%HOMEPATH%\Local Settings\Application Data\o3wbkna\uw2uzic0sp6.exe'
- <LS_APPDATA>\o3wbkna\uw2uzic0sp6.uw
- <LS_APPDATA>\o3wbkna\nvdltf2co.exe
- <LS_APPDATA>\o3wbkna\uw2uzic0sp6.exe
- <LS_APPDATA>\o3wbkna\nvdltf2co.exe
- <LS_APPDATA>\o3wbkna\uw2uzic0sp6.exe
- DNS ASK go##tar.com
- DNS ASK re##lt.com
- DNS ASK el##rot.com
- DNS ASK pa##dov.com
- DNS ASK fa###erest.com
- DNS ASK op##red.com
- DNS ASK ha####pricezat.com
- DNS ASK dn#.##ftncsi.com
- DNS ASK bu###osasrl.com
- DNS ASK pu###inacee.com
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''