Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\wup] 'Start' = '00000002'
- '<SYSTEM32>\sc.exe' create wup binPath= "%WINDIR%\wup.exe" DisplayName= "Windows Office" start= auto
- '<SYSTEM32>\net1.exe' start wup
- '<SYSTEM32>\sc.exe' delete wup
- '<SYSTEM32>\taskkill.exe' /F /IM wup.exe
- '<SYSTEM32>\taskkill.exe' /F /IM wuc.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\site[1].dat
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\site[1].dat
- 'gl####.altervista.org':80
- gl####.altervista.org/site.dat
- DNS ASK gl####.altervista.org
- ClassName: '(null)' WindowName: '(null)'