Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\PnServiceOver] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '<SYSTEM32>\2d3f0.exe' = '<SYSTEM32>\2d3f0.exe:*:Enabled:ipsec'
- '<SYSTEM32>\2d3f0.exe'
- '<SYSTEM32>\PnMgrSvr.exe'
- <SYSTEM32>\2d4bb.dll
- <SYSTEM32>\2d5b5.exe
- <SYSTEM32>\PnMgrSvr.exe
- <SYSTEM32>\2d3f0.exe
- 'my###g.co.il':80
- my###g.co.il/d/home.gif?rv########
- DNS ASK my###g.co.il