Техническая информация
Изменения в файловой системе:
Создает следующие файлы:
- %WINDIR%\Mstecf.dat
Удаляет следующие файлы:
- %WINDIR%\Prefetch\TASKLIST.EXE-10D94B23.pf
- %WINDIR%\Prefetch\SVCHOST.EXE-3530F672.pf
- %WINDIR%\Prefetch\TOURSTART.EXE-0D0140ED.pf
- %WINDIR%\Prefetch\TASKMGR.EXE-20256C55.pf
- %WINDIR%\Prefetch\SETUP.EXE-285178BD.pf
- %WINDIR%\Prefetch\SETUP.EXE-0E44220E.pf
- %WINDIR%\Prefetch\SPUPDSVC.EXE-21B36524.pf
- %WINDIR%\Prefetch\SETUPUTILITY.EXE-225075A7.pf
- %WINDIR%\Prefetch\TPAUTOCONNSVC.EXE-19F171C6.pf
- %WINDIR%\Prefetch\WMIADAP.EXE-2DF425B2.pf
- %WINDIR%\Prefetch\UPDATE.EXE-0C442665.pf
- %WINDIR%\Prefetch\WUAUCLT.EXE-399A8E72.pf
- %WINDIR%\Prefetch\WMIPRVSE.EXE-28F301A9.pf
- %WINDIR%\Prefetch\UNINSTALL.EXE-0700A35E.pf
- %WINDIR%\Prefetch\TRACERT.EXE-0E419688.pf
- %WINDIR%\Prefetch\UNREGMP2.EXE-07CACB61.pf
- %WINDIR%\Prefetch\UNINSTALL.EXE-0D9C8DD2.pf
- %WINDIR%\Prefetch\FAR.EXE-02435F54.pf
- %WINDIR%\Prefetch\DOTNETFX40_FULL_X86_X64.EXE-1BF5490D.pf
- %WINDIR%\Prefetch\Layout.ini
- %WINDIR%\Prefetch\IEXPLORE.EXE-27122324.pf
- %WINDIR%\Prefetch\CMD.EXE-087B4001.pf
- %WINDIR%\Prefetch\ALG.EXE-0F138680.pf
- %WINDIR%\Prefetch\DFRGNTFS.EXE-269967DF.pf
- %WINDIR%\Prefetch\DEFRAG.EXE-273F131E.pf
- %WINDIR%\Prefetch\LODCTR.EXE-1009C3B4.pf
- %WINDIR%\Prefetch\NTOSBOOT-B00DFAAD.pf
- %WINDIR%\Prefetch\MSIEXEC.EXE-2F8A8CAE.pf
- %WINDIR%\Prefetch\RUNONCE.EXE-2803F297.pf
- %WINDIR%\Prefetch\RUNDLL32.EXE-451FC2C0.pf
- %WINDIR%\Prefetch\MMC.EXE-0B0171A2.pf
- %WINDIR%\Prefetch\LOGONUI.EXE-0AF22957.pf
- %WINDIR%\Prefetch\MSCORSVW.EXE-1BF30400.pf
- %WINDIR%\Prefetch\MOFCOMP.EXE-01718E95.pf
Сетевая активность:
Подключается к:
- 'go###e.com.br':80
- 'localhost':1037
TCP:
Запросы HTTP GET:
- go###e.com.br/
UDP:
- DNS ASK go###e.com.br
Другое:
Ищет следующие окна:
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
