Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '542232c113e2' = '%APPDATA%\ICQM\ICQ\html\ru\NETSTAT.EXE'
- firefox.exe
- %APPDATA%\icqm\icq\html\ru\netstat.exe
- %APPDATA%\microsoft\windows\start menu\programs\internet explorer (64-bit).lnk
- 'oh#####p4.iestats.cc':443
- 'microsoft.com':80
- http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
- 'oh#####p4.iestats.cc':443
- DNS ASK et#######vlowh9x.ehistats.su
- DNS ASK oh#####p4.iestats.cc
- DNS ASK microsoft.com
- DNS ASK dj#####et.ieguards.su
- ClassName: '' WindowName: ''
- '%ProgramFiles(x86)%\mozilla firefox\firefox.exe' ' (со скрытым окном)
- '%ProgramFiles(x86)%\mozilla firefox\firefox.exe'