Техническая информация
- '%APPDATA%\svchost.exe' comstay
- %TEMP%\{E80C6BA2-CFFD-47fb-86F5-14E4BC254B50}\download3_x64.xml
- %WINDIR%\aplus.log
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\download3_x64[1].xml
- %APPDATA%\svchost.exe
- %TEMP%\{E80C6BA2-CFFD-47fb-86F5-14E4BC254B50}\unzip.dll
- '<IP-адрес в локальной сети>':16012
- '<IP-адрес в локальной сети>':16018
- 'localhost':1037
- 'do####.awangba.com':80
- do####.awangba.com/download3_x64.xml
- DNS ASK do####.awangba.com
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'