Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Windows Audio Control Panel' = '"<SYSTEM32>\mspanel.exe"'
- скрытых файлов
- '%CommonProgramFiles%\WDMati.exe'
- '<SYSTEM32>\mspanel.exe'
- %CommonProgramFiles%\WDMati.exe
- <SYSTEM32>\mspanel.exe
- %CommonProgramFiles%\WDMati.exe
- <SYSTEM32>\mspanel.exe
- '17#.#27.217.188':80
- 'wp#d':80
- wp#d/wpad.dat
- 17#.#27.217.188/favicon.ico
- DNS ASK wp#d