Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{f236e7a3-7abe-cf03-cf03-8bcf703cb2d6}] 'StubPath' = '<SYSTEM32>\ybczlsnwd\svchost.exe /t'
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\810[1]
- C:\s.dat
- C:\b2.txt
- <SYSTEM32>\ybczlsnwd\svchost.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\810[1]
- C:\s.dat
- C:\b2.txt
- 'd1##.2e6c3f.com':80
- 'c1##.2e6c3f.com':80
- 'localhost':1036
- d1##.2e6c3f.com/810/?n=##############################################
- c1##.2e6c3f.com/810/?n=##############################################
- DNS ASK d1##.2e6c3f.com
- DNS ASK c1##.2e6c3f.com