Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Awareness Installer AuthIP Filtering' = '%APPDATA%\Roaming\csavngyjqai\kbzlfphziagq.exe'
- '%APPDATA%\Roaming\csavngyjqai\ixvvtdmrh.exe' "%APPDATA%\Roaming\csavngyjqai\kbzlfphziagq.exe"
- '%APPDATA%\Roaming\csavngyjqai\kbzlfphziagq.exe'
- %APPDATA%\Roaming\csavngyjqai\kbzlfphziagq.ldpj
- %APPDATA%\Roaming\csavngyjqai\ixvvtdmrh.exe
- %APPDATA%\Roaming\csavngyjqai\kbzlfphziagq.exe
- %APPDATA%\Roaming\csavngyjqai\ixvvtdmrh.exe
- %APPDATA%\Roaming\csavngyjqai\kbzlfphziagq.exe
- DNS ASK re####edemand.net
- DNS ASK or###demand.net
- DNS ASK or###shout.net
- DNS ASK le###rbring.net
- DNS ASK re####eshout.net
- DNS ASK dn#.##ftncsi.com
- DNS ASK or###bring.net
- DNS ASK re####ebring.net
- DNS ASK re####elisten.net
- DNS ASK or###listen.net
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Indicator' WindowName: ''