Техническая информация
Для обеспечения автозапуска и распространения:
Заражает следующие исполняемые файлы:
- %PROGRAM_FILES%\Google\Chrome\Application\36.0.1985.125\chrome.dll
Вредоносные функции:
Запускает на исполнение:
- '<SYSTEM32>\Wat\WatAdminSvc.exe' /run
Завершает или пытается завершить
следующие пользовательские процессы:
- iexplore.exe
- firefox.exe
- chrome.exe
Изменения в файловой системе:
Создает следующие файлы:
- C:\Users\%USERNAME%\AppData\Local\Torch\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\manifest.json
- C:\Users\%USERNAME%\AppData\Local\Torch\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\lsdb.js
- C:\Users\ASPNET\AppData\Local\Torch\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\background.html
- C:\Users\%USERNAME%\AppData\Local\Torch\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\MhMQi32.js
- C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\MhMQi32.js
- C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\manifest.json
- C:\Users\%USERNAME%\AppData\Local\Torch\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\content.js
- C:\Users\%USERNAME%\AppData\Local\Torch\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\background.html
- C:\Users\ASPNET\AppData\Local\Torch\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\content.js
- <LS_APPDATA>\Torch\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\lsdb.js
- <LS_APPDATA>\Torch\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\content.js
- <LS_APPDATA>\Torch\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\MhMQi32.js
- <LS_APPDATA>\Torch\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\manifest.json
- C:\Users\ASPNET\AppData\Local\Torch\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\manifest.json
- C:\Users\ASPNET\AppData\Local\Torch\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\lsdb.js
- <LS_APPDATA>\Torch\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\background.html
- C:\Users\ASPNET\AppData\Local\Torch\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\MhMQi32.js
- <LS_APPDATA>\Google\Chrome SxS\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\content.js
- <LS_APPDATA>\Google\Chrome SxS\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\background.html
- <LS_APPDATA>\Google\Chrome SxS\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\manifest.json
- <LS_APPDATA>\Google\Chrome SxS\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\lsdb.js
- C:\Users\ASPNET\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\lsdb.js
- C:\Users\ASPNET\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\content.js
- C:\Users\ASPNET\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\MhMQi32.js
- C:\Users\ASPNET\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\manifest.json
- <LS_APPDATA>\Google\Chrome SxS\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\MhMQi32.js
- C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\background.html
- C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\MhMQi32.js
- C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\lsdb.js
- C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\content.js
- C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\content.js
- C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\background.html
- C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\manifest.json
- C:\Users\Guest\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\lsdb.js
- C:\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\background.html
- <LS_APPDATA>\Chromatic Browser\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\manifest.json
- <LS_APPDATA>\Chromatic Browser\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\lsdb.js
- C:\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\background.html
- <LS_APPDATA>\Chromatic Browser\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\MhMQi32.js
- C:\Users\ASPNET\AppData\Local\Chromatic Browser\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\MhMQi32.js
- C:\Users\ASPNET\AppData\Local\Chromatic Browser\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\manifest.json
- <LS_APPDATA>\Chromatic Browser\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\content.js
- <LS_APPDATA>\Chromatic Browser\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\background.html
- C:\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\content.js
- C:\Users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\lsdb.js
- C:\Users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\content.js
- C:\Users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\MhMQi32.js
- C:\Users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\manifest.json
- C:\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\manifest.json
- C:\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\lsdb.js
- C:\Users\HomeGroupUser$\AppData\Local\Chromatic Browser\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\background.html
- C:\Users\Guest\AppData\Local\Chromatic Browser\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\MhMQi32.js
- C:\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\content.js
- C:\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\background.html
- C:\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\manifest.json
- C:\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\lsdb.js
- C:\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\lsdb.js
- C:\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\content.js
- C:\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\MhMQi32.js
- C:\Users\Guest\AppData\Local\Torch\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\manifest.json
- C:\Users\HomeGroupUser$\AppData\Local\Torch\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\MhMQi32.js
- C:\Users\ASPNET\AppData\Local\Chromatic Browser\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\background.html
- C:\Users\%USERNAME%\AppData\Local\Chromatic Browser\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\MhMQi32.js
- C:\Users\ASPNET\AppData\Local\Chromatic Browser\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\lsdb.js
- C:\Users\ASPNET\AppData\Local\Chromatic Browser\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\content.js
- C:\Users\%USERNAME%\AppData\Local\Chromatic Browser\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\content.js
- C:\Users\%USERNAME%\AppData\Local\Chromatic Browser\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\background.html
- C:\Users\%USERNAME%\AppData\Local\Chromatic Browser\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\manifest.json
- C:\Users\%USERNAME%\AppData\Local\Chromatic Browser\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\lsdb.js
- C:\Users\ASPNET\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\background.html
- C:\Users\ASPNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\MhMQi32.js
- C:\Users\ASPNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\manifest.json
- <LS_APPDATA>\Google\Chrome\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\content.js
- <LS_APPDATA>\Google\Chrome\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\background.html
- C:\Users\ASPNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\background.html
- C:\Users\%USERNAME%\AppData\Local\Google\Chrome\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\MhMQi32.js
- C:\Users\ASPNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\lsdb.js
- C:\Users\ASPNET\AppData\Local\Google\Chrome\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\content.js
- <LS_APPDATA>\Google\Chrome\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\lsdb.js
- C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\lsdb.js
- C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\content.js
- C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\MhMQi32.js
- C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\manifest.json
- <LS_APPDATA>\Google\Chrome\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\MhMQi32.js
- <LS_APPDATA>\Google\Chrome\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\manifest.json
- C:\Users\Guest\AppData\Local\Google\Chrome\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\background.html
- <LS_APPDATA>\Google\Chrome\User Data\Default\Preferences__.tmp
- %TEMP%\5c6e4909\VQc@h1D1fv8.org\bootstrap.js
- %TEMP%\5c6e4909\VQc@h1D1fv8.org\content\bg.js
- %TEMP%\5c6e4909\VQc@h1D1fv8.org\install.rdf
- %TEMP%\5c6e4909\VQc@h1D1fv8.org\chrome.manifest
- %TEMP%\5c6e4909\uGHv2WtcuVDn7h.dll
- %TEMP%\5c6e4909\IySEhjRtlpU3cY9.dat
- %TEMP%\5c6e4909\uGHv2WtcuVDn7h.x64.dll
- %TEMP%\5c6e4909\uGHv2WtcuVDn7h.tlb
- %TEMP%\5c6e4909\nchbdelnmgnijbhkhofiphmjnhjhgckl\MhMQi32.js
- C:\Users\%USERNAME%\AppData\Local\Google\Chrome\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\content.js
- C:\Users\%USERNAME%\AppData\Local\Google\Chrome\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\background.html
- C:\Users\%USERNAME%\AppData\Local\Google\Chrome\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\manifest.json
- C:\Users\%USERNAME%\AppData\Local\Google\Chrome\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\lsdb.js
- %TEMP%\5c6e4909\nchbdelnmgnijbhkhofiphmjnhjhgckl\manifest.json
- %TEMP%\5c6e4909\nchbdelnmgnijbhkhofiphmjnhjhgckl\background.html
- %TEMP%\5c6e4909\nchbdelnmgnijbhkhofiphmjnhjhgckl\lsdb.js
- %TEMP%\5c6e4909\nchbdelnmgnijbhkhofiphmjnhjhgckl\content.js
- C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\background.html
- C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\manifest.json
- C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\lsdb.js
- C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\background.html
- C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\MhMQi32.js
- <LS_APPDATA>\Comodo\Dragon\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\MhMQi32.js
- <LS_APPDATA>\Comodo\Dragon\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\manifest.json
- C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\content.js
- C:\Users\Guest\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\background.html
- C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\content.js
- C:\Users\%USERNAME%\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\lsdb.js
- C:\Users\%USERNAME%\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\content.js
- C:\Users\%USERNAME%\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\MhMQi32.js
- C:\Users\%USERNAME%\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\manifest.json
- C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\manifest.json
- C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\lsdb.js
- C:\Users\%USERNAME%\AppData\Local\Google\Chrome SxS\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\background.html
- C:\Users\HomeGroupUser$\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\MhMQi32.js
- C:\Users\%USERNAME%\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\content.js
- C:\Users\%USERNAME%\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\background.html
- C:\Users\%USERNAME%\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\manifest.json
- C:\Users\%USERNAME%\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\lsdb.js
- C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\lsdb.js
- C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\content.js
- C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\MhMQi32.js
- C:\Users\HomeGroupUser$\AppData\Local\Google\Chrome\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\manifest.json
- C:\Users\%USERNAME%\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\MhMQi32.js
- <LS_APPDATA>\Comodo\Dragon\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\background.html
- C:\Users\ASPNET\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\MhMQi32.js
- <LS_APPDATA>\Comodo\Dragon\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\lsdb.js
- <LS_APPDATA>\Comodo\Dragon\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\content.js
- C:\Users\ASPNET\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\content.js
- C:\Users\ASPNET\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\background.html
- C:\Users\ASPNET\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\manifest.json
- C:\Users\ASPNET\AppData\Local\Comodo\Dragon\User Data\Default\Extensions\nchbdelnmgnijbhkhofiphmjnhjhgckl\5.2\lsdb.js
Сетевая активность:
Подключается к:
- 'ct###.#indowsupdate.com':80
TCP:
Запросы HTTP GET:
- ct###.#indowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?b1##############
UDP:
- DNS ASK ct###.#indowsupdate.com
