Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Windows Update' = '"<SYSTEM32>\audiohu.exe"'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Audio HD Driver' = '"%TEMP%\k7Rs72GtlacL.exe"'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Audio HD Driver' = '"%TEMP%\k7Rs72GtlacL.exe"'
- скрытых файлов
- %CommonProgramFiles%\wadhost.exe
- <SYSTEM32>\audiohu.exe
- <SYSTEM32>\audiohu.exe
- %CommonProgramFiles%\wadhost.exe
- %TEMP%\k7Rs72GtlacL.exe
- %APPDATA%\k7Rs72GtlacL.exe
- <SYSTEM32>\audiohu.exe
- %CommonProgramFiles%\wadhost.exe
- %TEMP%\k7Rs72GtlacL.exe
- %APPDATA%\k7Rs72GtlacL.exe
- '13#7.kz':80
- 13#7.kz/vsocks/gate.php
- DNS ASK 13#7.kz
- ClassName: 'Indicator' WindowName: ''