Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Protect' = '%APPDATA%\protect.exe'
- %TEMP%\hotspot-shield_hotspot_shield_2.53_francais_57194(1).exe
- %TEMP%\svchost.exe
- %APPDATA%\protect.exe
- %TEMP%\hotspot-shield_hotspot_shield_2.53_francais_57194(1).exe
- %TEMP%\svchost.exe
- 'wi######system.no-ip.info':6000
- DNS ASK wi######system.no-ip.info
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '#32770' WindowName: ''
- ClassName: 'Indicator' WindowName: ''