Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] 'run' = '%APPDATA%\MICROS~1.NET\MICROS~1.PIF'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Microsoft .NET Framework 4 Client Profile' = '%APPDATA%\Microsoft .NET Framework 4 Client Profile\Microsoft .NET Framework 4 Client Profile.pif'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = 'explorer.exe,%APPDATA%\Microsoft .NET Framework 4 Client Profile\Microsoft .NET Framework 4 Client Profile.pif'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run] 'Microsoft .NET Framework 4 Client Profile' = '%APPDATA%\Microsoft .NET Framework 4 Client Profile\Microsoft .NET Framework 4 Client Profile.pif'
- '<SYSTEM32>\wuauclt.exe'
- '%WINDIR%\explorer.exe'
- <SYSTEM32>\wuauclt.exe
- %APPDATA%\Microsoft .NET Framework 4 Client Profile\Microsoft .NET Framework 4 Client Profile.pif
- '20#.#6.232.182':20
- DNS ASK up####.microsoft.com