Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'FixBluetooth' = '<SYSTEM32>\HA-KC\BlueSoleiI.exe'
- [<HKLM>\SOFTWARE\Classes\ChatFile\Shell\open\command] '' = '"<SYSTEM32>\HA-KC\System" -noconnect'
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\BlueSoleiI.lnk
- <SYSTEM32>\HA-KC\System
- <SYSTEM32>\HA-KC\BlueSoleiI.exe
- %WINDIR%\msagent\agentsvr.exe -Embedding
- <SYSTEM32>\HA-KC\System
- <SYSTEM32>\HA-KC\Efwwin32.dll
- <SYSTEM32>\HA-KC\ODCB.INI
- %TEMP%\GS1.tmp
- <SYSTEM32>\HA-KC\BlueSoleiI.exe
- %TEMP%\GS1.tmp
- 'us.###tcrew.info':2112
- DNS ASK us.###tcrew.info