Техническая информация
- '<LS_APPDATA>\WindowsSystem\Taskhost.exe'
- '<SYSTEM32>\schtasks.exe' /Create /TN "Update\WindowsSystem32" /XML "%TEMP%\1277785871.xml"
- '<SYSTEM32>\schtasks.exe' /Delete /TN "Update\WindowsSystem32" /F
- %TEMP%\1277785871.xml
- <LS_APPDATA>\WindowsSystem\Taskhost.exe
- <LS_APPDATA>\WindowsSystem\Taskhost.exe
- %TEMP%\1277785871.xml
- 'ma######ervice.duckdns.org':3434
- '20#.#6.232.182':80
- 'wp#d':80
- http://crl.microsoft.com/pki/crl/products/CSPCA.crl via 20#.#6.232.182
- http://11#.#11.111.1/wpad.dat via wp#d
- DNS ASK ma######ervice.duckdns.org
- DNS ASK crl.microsoft.com
- DNS ASK wp#d