Техническая информация
- '%HOMEPATH%\uVd46Kv\host.exe'
- '%HOMEPATH%\uVd46Kv\flashplayerx86.exe'
- %APPDATA%\Microsoft\CryptnetUrlCache\MetaData\8DFDF057024880D7A081AFBF6D26B92F
- %APPDATA%\Microsoft\CryptnetUrlCache\Content\60E31627FDA0A46932B0E5948949F2A5
- %APPDATA%\Microsoft\CryptnetUrlCache\MetaData\60E31627FDA0A46932B0E5948949F2A5
- %APPDATA%\Microsoft\CryptnetUrlCache\Content\398EE64D66758B5715368AA94044B13A
- %APPDATA%\Microsoft\CryptnetUrlCache\MetaData\398EE64D66758B5715368AA94044B13A
- %APPDATA%\Microsoft\CryptnetUrlCache\Content\8DFDF057024880D7A081AFBF6D26B92F
- %HOMEPATH%\uVd46Kv\lMv.wjn
- %HOMEPATH%\uVd46Kv\flashplayerx86.exe
- %HOMEPATH%\uVd46Kv\host.exe
- %HOMEPATH%\oGj81Ah.txt
- %TEMP%\lLx17Qd.BV6
- %TEMP%\aut1.tmp
- %HOMEPATH%\oGj81Ah.txt
- %TEMP%\lLx17Qd.BV6
- %TEMP%\lLx17Qd.BV6
- %TEMP%\aut1.tmp
- 'ev######.ws.symantec.com':80
- 'crl.verisign.com':80
- 'wp#d':80
- crl.verisign.com/pca3-g5.crl
- ev######.ws.symantec.com/evcs.crl
- wp#d/wpad.dat
- crl.verisign.com/pca3.crl
- DNS ASK ev######.ws.symantec.com
- DNS ASK crl.verisign.com
- DNS ASK wp#d
- ClassName: 'Indicator' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'