Техническая информация
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings] 'WarnonBadCertRecving' = '00000000'
- %APPDATA%\Mozilla\Firefox\prefs\prefcalls.js
- %APPDATA%\Mozilla\Firefox\prefs\greprefs.js
- %APPDATA%\Mozilla\Firefox\prefs\winpref.js
- <SYSTEM32>\PerfStringBackup.TMP
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini
- 'er###atos.com':443
- 'ep##t-2.com':80
- ep##t-2.com/tables/posts/setups2.ruh
- DNS ASK er###atos.com
- DNS ASK ep##t-2.com