Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\D460AbOBd] 'Start' = '00000001'
- <SYSTEM32>\D460AbOBd.sys
- <SYSTEM32>\MakeAtManage.sys
- <Текущая директория>\updata\tmp.zip
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\updata[1].zip
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\shhhhh[1].txt
- <SYSTEM32>\BE056G0MC.sys
- <SYSTEM32>\BE056G0MC.systmp
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\mine[1]
- <SYSTEM32>\BE056G0MC.sys
- <Текущая директория>\updata\tmp.zip в <Текущая директория>\updata\updata.zip
- <SYSTEM32>\BE056G0MC.systmp в <SYSTEM32>\BE056G0MC.sys
- 'localhost':1042
- 'bu########uding.stor.sinaapp.com':80
- '52########e-shzshz.stor.sinaapp.com':80
- 't.##.com':80
- bu########uding.stor.sinaapp.com/cq/updata.zip
- t.##.com/sddosas/mine
- 52########e-shzshz.stor.sinaapp.com/SHZ/shhhhh.txt
- DNS ASK bu########huye3.stor.sinaapp.com
- DNS ASK mm.#ar0.com
- DNS ASK my.##years.com
- DNS ASK 52########e-shzshz.stor.sinaapp.com
- DNS ASK t.##.com
- DNS ASK bu########uding.stor.sinaapp.com
- ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'
- ClassName: 'MS_AutodialMonitor' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'