Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'C78.exe' = '%PROGRAM_FILES%\LP\1C18\C78.exe'
- %PROGRAM_FILES%\LP\1C18\1.tmp
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1601' = '00000000'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '2301' = '00000003'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\4] '1809' = '00000003'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '2500' = '00000003'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1407' = '00000003'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1] '1809' = '00000003'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\0] '1809' = '00000003'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] '1809' = '00000003'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2] '1809' = '00000003'
- %PROGRAM_FILES%\LP\1C18\C78.exe
- %PROGRAM_FILES%\LP\1C18\1.tmp
- %APPDATA%\88E66\680F.8E6
- 'is####analyst.com':80
- is####analyst.com/png/intel.gif?sv##################################################################
- DNS ASK cl.###abatory.com
- DNS ASK cl.##ras-ip.com
- DNS ASK is####analyst.com
- '<IP-адрес в локальной сети>':1035