Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Microsoft Update 2.5' = '"C:\ProgramData\Whatsbr.exe"'
- Средство контроля пользовательских учетных записей (UAC)
- C:\ProgramData\Whatsbr.exe
- '20#.#8.201.18':49998
- 'wh####pp2014.org':80
- wh####pp2014.org/redirect.php
- DNS ASK wh####pp2014.org
- ClassName: 'Indicator' WindowName: '(null)'
- ClassName: 'TApplication' WindowName: 'fbrt'
- ClassName: 'TApplication' WindowName: '031892390129038'