Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\wuauserv] 'Start' = '00000002'
- '%WINDIR%\sensext.exe'
- '<SYSTEM32>\regsvr32.exe' /s /u "<SYSTEM32>\msfontmdn.dat"
- '<SYSTEM32>\regsvr32.exe' /s "%TEMP%\_instb327.$$"
- <SYSTEM32>\msfontmdn.dat
- <DRIVERS>\{AE2A3887-A30A-4B39-A5E6-AC891A07AFF3}.sys
- %TEMP%\_instb327.$$
- %TEMP%\w7e1.tmp
- %WINDIR%\sensext.exe
- <DRIVERS>\{AE2A3887-A30A-4B39-A5E6-AC891A07AFF3}.sys
- %TEMP%\_instb327.$$
- 'ns####.webhop.net':443
- DNS ASK ns####.webhop.net