Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\GoogleUpdateBeta] 'Start' = '00000002'
- <LS_APPDATA>\Google\Update\GoogleUpdateBeta.exe /svc
- %TEMP%\nsm3.tmp\nsProcess.dll
- <LS_APPDATA>\Google\Update\GoogleUpdateBeta.exe
- %TEMP%\nsm2.tmp
- %TEMP%\nsm3.tmp\System.dll
- %TEMP%\nsm3.tmp\System.dll
- %TEMP%\nsm3.tmp\nsProcess.dll
- 'se#####20.apartmsk.ru':8000
- 'se####-3.ruporno.tv':8000
- 'se#####1.apartmsk.ru':8000
- 'se#####16.apartmsk.ru':8000
- 'se#####11.ruporno.tv':8000
- DNS ASK se#####20.apartmsk.ru
- DNS ASK se####-3.ruporno.tv
- DNS ASK se#####1.apartmsk.ru
- DNS ASK se#####16.apartmsk.ru
- DNS ASK se#####11.ruporno.tv