Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Windows Internet Name Service] 'Start' = '00000002'
- '<SYSTEM32>\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\updater.exe'
- '<SYSTEM32>\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe'
- <SYSTEM32>\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\queries-03.cache
- <SYSTEM32>\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\queries-02.cache
- <SYSTEM32>\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\wins.exe
- <SYSTEM32>\config\systemprofile\Local Settings\Application Data\Windows Internet Name Service\updater.exe
- 'www.hy###put.com':80
- 'www.hy###setup.com':80
- www.hy###put.com/drm_check.php
- www.hy###setup.com/drm_check.php
- DNS ASK www.hy###get.com
- DNS ASK www.hy###put.com
- DNS ASK www.hy###setup.com