Техническая информация
- <SYSTEM32>\tasks\purgeapp
- %APPDATA%\pcdreams\2021_03_11_plogs.txt
- %ALLUSERSPROFILE%\pcdreams.com\pcdreams\purge.bat
- %LOCALAPPDATA%\microsoft\windows\history\history.ie5\mshist012021031120210312\index.dat
- 'ch####p.dyndns.org':80
- 'qu###.#cdreams.com.sg':443
- 'r3.#.lencr.org':80
- 'fo###.#oogleapis.com':443
- 'cd###.#loudflare.com':443
- 'go#####agmanager.com':443
- 'fo###.gstatic.com':443
- 'qu###.#cdreams.com.sg':443
- 'fo###.#oogleapis.com':443
- 'cd###.#loudflare.com':443
- 'go#####agmanager.com':443
- 'fo###.gstatic.com':443
- DNS ASK ch####p.dyndns.org
- DNS ASK qu###.#cdreams.com.sg
- DNS ASK r3.#.lencr.org
- DNS ASK microsoft.com
- DNS ASK fo###.#oogleapis.com
- DNS ASK cd###.#loudflare.com
- DNS ASK go#####agmanager.com
- DNS ASK fo###.gstatic.com
- ClassName: 'DDEMLMom' WindowName: ''
- ClassName: 'IEFrame' WindowName: ''
- ClassName: 'Static' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
- '<SYSTEM32>\cmd.exe' /c "%ALLUSERSPROFILE%\pcdreams.com\PCDreams\purge.bat"' (со скрытым окном)
- '<SYSTEM32>\taskeng.exe' {5762B8EC-AFE2-4867-BD47-A14F3239B179} S-1-5-21-1960123792-2022915161-3775307078-1001:qmerbwk\user:S4U
- '<SYSTEM32>\cmd.exe' /c "%ALLUSERSPROFILE%\pcdreams.com\PCDreams\purge.bat"