Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'WinDef' = '"%TEMP%\WinDef.Exe"'
- <SYSTEM32>\wscript.exe "%TEMP%\kbuTd.vbs"
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\vbc.exe
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\vbc.exe
- %APPDATA%\%USERNAME%v1.18.0 - Trial versionlog.dat
- %TEMP%\%USERNAME%7
- %TEMP%\%USERNAME%8
- %TEMP%\kbuTd.vbs
- %TEMP%\WinDef.Exe
- %TEMP%\%USERNAME%2.txt
- %APPDATA%\%USERNAME%v1.18.0 - Trial versionlog.dat
- %TEMP%\%USERNAME%7
- %TEMP%\%USERNAME%8
- %TEMP%\%USERNAME%2.txt
- 'b7###.effers.com':40123
- DNS ASK b7###.effers.com
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''