Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'MSUPD' = '%APPDATA%\wuaclt1.exe'
- %APPDATA%\wuaclt1.exe
- %APPDATA%\wuaclt1.exe
- 'fl###.yahoomit.com':443
- 'fl###.yahoomit.com':80
- fl###.yahoomit.com/0000/a209296.asp
- fl###.yahoomit.com/0000/a213000.asp
- fl###.yahoomit.com/0000/a203390.asp
- fl###.yahoomit.com/0000/a207562.asp
- fl###.yahoomit.com/0000/a220468.asp
- fl###.yahoomit.com/0000/a224140.asp
- fl###.yahoomit.com/0000/a214796.asp
- fl###.yahoomit.com/0000/a218828.asp
- fl###.yahoomit.com/0000/a187046.asp
- fl###.yahoomit.com/0000/a190687.asp
- fl###.yahoomit.com/0000/a167609.asp
- fl###.yahoomit.com/0000/a185453.asp
- fl###.yahoomit.com/0000/a198015.asp
- fl###.yahoomit.com/0000/a201718.asp
- fl###.yahoomit.com/0000/a192421.asp
- fl###.yahoomit.com/0000/a196437.asp
- DNS ASK fl###.yahoomit.com
- ClassName: 'Indicator' WindowName: ''