Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\GoogleUpdateBeta] 'Start' = '00000002'
- <LS_APPDATA>\Google\Update\GoogleUpdateBeta.exe /svc
- %TEMP%\nse3.tmp\nsProcess.dll
- <LS_APPDATA>\Google\Update\GoogleUpdateBeta.exe
- %TEMP%\nso2.tmp
- %TEMP%\nse3.tmp\System.dll
- %TEMP%\nse3.tmp\System.dll
- %TEMP%\nse3.tmp\nsProcess.dll
- 'se####-7.ruporno.tv':8000
- 'se#####14.ruporno.tv':8000
- 'se####-2.ruporno.tv':8000
- 'se#####11.apartmsk.ru':8000
- 'se#####16.ruporno.tv':8000
- 'se#####17.apartmsk.ru':8000
- 'se#####19.apartmsk.ru':8000
- DNS ASK se#####14.ruporno.tv
- DNS ASK se####-7.ruporno.tv
- DNS ASK se#####18.apartmsk.ru
- DNS ASK se####-2.ruporno.tv
- DNS ASK se#####17.apartmsk.ru
- DNS ASK se#####16.ruporno.tv
- DNS ASK se#####11.apartmsk.ru
- DNS ASK se#####19.apartmsk.ru