Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Windows Update Client ' = '<SYSTEM32>\wuclient.exe'
- [<HKLM>\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 'XPSP2 Firewall' = '<SYSTEM32>\xpsp2fw.exe'
- Обновления системы (Windows Update)
- %WINDIR%\syswow64\wuclient.exe
- %WINDIR%\syswow64\xpsp2fw.exe
- C:\e.exe
- %WINDIR%\syswow64\xprx11.dll
- %WINDIR%\syswow64\decos-.dll
- %WINDIR%\syswow64\ebun-co.dll
- %WINDIR%\syswow64\acionadsl.dll
- %WINDIR%\syswow64\cppacoatet.dll
- %WINDIR%\syswow64\admtlt.dll
- %WINDIR%\syswow64\dslconet.dll
- <PATH_SAMPLE>.dat
- http://se##que.com/e.php
- DNS ASK se##que.com