Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\WinUpdate.lnk
- %TEMP%\wmiprvse.exe
- <SYSTEM32>\extrac32.exe ""%TEMP%\~dftemp.tmp"" "%TEMP%\wmiprvse.exe"
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings] 'WarnOnPostRedirect' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings] 'WarnonZoneCrossing' = '00000000'
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\acheb[1].htm
- %TEMP%\wmiprvse.exe
- %TEMP%\~dftemp.tmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\acheb[1].htm
- 'mi#####ftup.dnset.com':80
- 'localhost':1037
- mi#####ftup.dnset.com//acheb.aspx?Ra#####################
- DNS ASK mi#####ftup.dnset.com
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: ''