Техническая информация
- <SYSTEM32>\tasks\nvngxupdatecheckdaily_{3d45a02f-a02f-a02f-a02f-3d45a02fa02f}
- %WINDIR%\syswow64\explorer.exe
- %WINDIR%\explorer.exe
- %TEMP%\210a.tmp
- %APPDATA%\hhsetre
- %WINDIR%\serviceprofiles\networkservice\appdata\locallow\microsoft\cryptneturlcache\metadata\f0accf77cdcbff39f6191887f6d2d357
- %WINDIR%\serviceprofiles\networkservice\appdata\locallow\microsoft\cryptneturlcache\content\f0accf77cdcbff39f6191887f6d2d357
- %APPDATA%\rwwgsts
- %TEMP%\eb20.tmp.dll
- %PROGRAMDATA%\microsoft\vault\ac658cb4-9126-49bd-b877-31eedab3f204\policy.vpol
- %PROGRAMDATA%\microsoft\vault\ac658cb4-9126-49bd-b877-31eedab3f204\3ccd5499-87a8-4b10-a215-608888dd3b55.vsch
- %PROGRAMDATA%\microsoft\vault\ac658cb4-9126-49bd-b877-31eedab3f204\2f1a6504-0641-44cf-8bb5-3612d865f2e5.vsch
- %LOCALAPPDATA%\microsoft\vault\4bf4c442-9b8a-41a0-b380-dd4a704ddb28\policy.vpol
- %TEMP%\2917.tmp
- %TEMP%\2917.tmp-shm
- %TEMP%\2985.tmp
- %TEMP%\61a5.tmp-shm
- %APPDATA%\hhsetre
- %APPDATA%\rwwgsts
- %TEMP%\2917.tmp-shm
- %TEMP%\2917.tmp
- %TEMP%\2985.tmp
- %TEMP%\61a5.tmp-shm
- 'dk#####i92iejdnfsa.info':443
- 'ch#####iwkokskkall.info':443
- DNS ASK ch#####iwkokskkall.info
- DNS ASK dk#####i92iejdnfsa.info
- '<SYSTEM32>\regsvr32.exe' /s %TEMP%\EB20.tmp.dll
- '%WINDIR%\syswow64\explorer.exe'
- '%WINDIR%\explorer.exe'