Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\GoogleUpdateBeta] 'Start' = '00000002'
- <LS_APPDATA>\Google\Update\GoogleUpdateBeta.exe /svc
- %TEMP%\nsk3.tmp\nsSCM.dll
- <LS_APPDATA>\Google\Update\GoogleUpdateBeta.exe
- %TEMP%\nsk3.tmp\nsProcess.dll
- %TEMP%\nsk2.tmp
- %TEMP%\nsk3.tmp\System.dll
- %TEMP%\nsk3.tmp\System.dll
- %TEMP%\nsk3.tmp\nsSCM.dll
- %TEMP%\nsk3.tmp\nsProcess.dll
- 'se#####16.ruporno.tv':8000
- 'se#####19.ruporno.tv':8000
- 'se#####10.ruporno.tv':8000
- 'se#####15.ruporno.tv':8000
- 'se#####13.ruporno.tv':8000
- 'se#####18.ruporno.tv':8000
- DNS ASK sE#####16.RuPORno.tV
- DNS ASK Se#####19.RuPOrNO.TV
- DNS ASK sE#####10.RuporNo.tV
- DNS ASK se#####15.rUPORNO.tv
- DNS ASK se#####13.RuPoRnO.tV
- DNS ASK Se#####18.RUPOrNo.tv