Техническая информация
- <SYSTEM32>\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\MetaData\7B2238AACCEDC3F1FFE8E7EB5F575EC9
- <SYSTEM32>\wbem\AutoRecover\23BDE61F1F4FACE17E9B0C01F2A1FD9B.mof
- %TEMP%\tmp5.tmp
- <SYSTEM32>\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content\A44F4E7CB3133FF765C39A53AD8FCFDD
- <SYSTEM32>\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\MetaData\A44F4E7CB3133FF765C39A53AD8FCFDD
- <SYSTEM32>\config\systemprofile\Application Data\Microsoft\CryptnetUrlCache\Content\7B2238AACCEDC3F1FFE8E7EB5F575EC9
- <SYSTEM32>\wbem\AutoRecover\C8463ECBE33BC240263A0B094E46D510.mof
- %TEMP%\aut2.tmp
- %CommonProgramFiles%\YT.exe
- %TEMP%\aut1.tmp
- %TEMP%\tmp4.tmp
- %TEMP%\tmp3.tmp
- %CommonProgramFiles%\Splash.png
- %CommonProgramFiles%\Splash.png
- %CommonProgramFiles%\YT.exe
- %TEMP%\tmp3.tmp
- %TEMP%\tmp4.tmp
- %TEMP%\tmp5.tmp
- %CommonProgramFiles%\YT.exe
- %TEMP%\aut1.tmp
- %TEMP%\aut2.tmp
- %CommonProgramFiles%\Splash.png
- '20#.#6.232.182':80
- 'wp#d':80
- http://crl.microsoft.com/pki/crl/products/CodeSignPCA2.crl via 20#.#6.232.182
- http://crl.microsoft.com/pki/crl/products/CSPCA.crl via 20#.#6.232.182
- http://11#.#11.111.1/wpad.dat via wp#d
- DNS ASK crl.microsoft.com
- DNS ASK wp#d
- '%CommonProgramFiles%\YT.exe'
- '<SYSTEM32>\msiexec.exe' /V