Техническая информация
- [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] 'OneDriveSync_9E32739D' = '"%LOCALAPPDATA%\Microsoft\SyncServices\SyncService.exe"'
- <SYSTEM32>\tasks\microsoftedgeupdatetask_9e32739d
- %LOCALAPPDATA%\microsoft\syncservices\syncservice.exe
- %LOCALAPPDATA%\microsoft\onedrivestandalone\onedriveupdate.exe
- %LOCALAPPDATA%\microsoft\syncservices\manifest.json
- %LOCALAPPDATA%\microsoft\syncservices\settings.dat
- %LOCALAPPDATA%\microsoft\onedrivestandalone\cache.dat
- %LOCALAPPDATA%\microsoft\devicesync\sync.dat
- %LOCALAPPDATA%\microsoft\terminal server client\state.bin
- %TEMP%\thd77f.tmp
- %LOCALAPPDATA%\microsoft\syncservices\runstate.bin
- 'ms###ifyhelp.cc':8093
- 'ms###ifyhelp.cc':8080
- 'ip##pi.com':80
- http://17#.##5.25.133:8093/files?pr############################
- http://ms#####yhelp.cc:8080/ws/publisher?de########################################################################################### via ms###ifyhelp.cc
- http://ip##pi.com/json/?fi####################################################################################################
- http://17#.##5.25.133:8093/files/hb/19721B084754093D.json
- DNS ASK ms###ifyhelp.cc
- DNS ASK ip##pi.com