Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\aspnet_state32] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '<SYSTEM32>\ir50_qc32.exe' = '<SYSTEM32>\ir50_qc32.exe:*:Enabled:Windows Update Service'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List] '<SYSTEM32>\ir50_qc32.exe' = '<SYSTEM32>\ir50_qc32.exe:*:Enabled:Windows Update Service'
- <SYSTEM32>\avmeter32.exe
- <SYSTEM32>\ir50_qc32.exe
- <SYSTEM32>\netsh.exe firewall add allowedprogram program="<SYSTEM32>\ir50_qc32.exe" name="Windows Update Service" mode=ENABLE scope=ALL profile=ALL
- chrome.exe
- <SYSTEM32>\ir50_qc32.exe
- <SYSTEM32>\1917353848
- <SYSTEM32>\avmeter32.exe
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\{417f1444-9aa2-43cc-bd5a-3a9cda2c283f}\chrome.manifest
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\{417f1444-9aa2-43cc-bd5a-3a9cda2c283f}\install.rdf
- <SYSTEM32>\avmeter32.dll
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\{417f1444-9aa2-43cc-bd5a-3a9cda2c283f}\chrome\xulcache.jar
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\{417f1444-9aa2-43cc-bd5a-3a9cda2c283f}\defaults\preferences\xulcache.js
- '85.##.230.12':80
- 85.##.230.12/bc840551716