Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\SysmonLog32] 'Start' = '00000002'
- <SYSTEM32>\avmeter32.exe
- <SYSTEM32>\kbdhu132.exe
- <SYSTEM32>\netsh.exe firewall add allowedprogram program="<SYSTEM32>\kbdhu132.exe" name="Windows Update Service" mode=ENABLE scope=ALL profile=ALL
- chrome.exe
- <SYSTEM32>\1917353848
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\{3a56265c-2737-477f-ad8b-322e881d60df}\chrome.manifest
- <SYSTEM32>\avmeter32.exe
- <SYSTEM32>\kbdhu132.exe
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\{3a56265c-2737-477f-ad8b-322e881d60df}\install.rdf
- <SYSTEM32>\avmeter32.dll
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\{3a56265c-2737-477f-ad8b-322e881d60df}\chrome\xulcache.jar
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\{3a56265c-2737-477f-ad8b-322e881d60df}\defaults\preferences\xulcache.js
- '85.##.230.12':80
- 85.##.230.12/bc840551716