Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\googleupdate] 'Start' = '00000002'
- '%WINDIR%\PLcVhyAiobgYydL.exe'
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
- <SYSTEM32>\svchost.exe
- <SYSTEM32>\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\6YQRA29M\icanhazip[1]
- %WINDIR%\PLcVhyAiobgYydL.exe
- <SYSTEM32>\config\systemprofile\Local Settings\Temporary Internet Files\Content.IE5\6YQRA29M\icanhazip[1]
- <SYSTEM32>\PerfStringBackup.TMP
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini
- 'ic###azip.com':80
- '74.##5.232.51':80
- ic###azip.com/
- DNS ASK st##.#honepower.com
- DNS ASK st###.#oiceeclipse.net
- DNS ASK ic###azip.com
- DNS ASK st##.#oc.ams-ix.net
- DNS ASK st###erver.org
- DNS ASK s1.##raba.net
- DNS ASK google.com
- 's1.##raba.net':3478
- 'st##.#oc.ams-ix.net':3478
- 'st###.#oiceeclipse.net':3478
- 'st###erver.org':3478
- 'st##.#honepower.com':3478
- ClassName: 'MS_WINHELP' WindowName: ''