Техническая информация
- C:\ProgramData\Microsoft\RAC\Temp\sqlEE44.tmp
- C:\ProgramData\Microsoft\RAC\Temp\sqlEEC2.tmp
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\updata[1].php
- C:\ProgramData\Microsoft\RAC\Temp\sqlEE44.tmp
- C:\ProgramData\Microsoft\RAC\Temp\sqlEEC2.tmp
- <SYSTEM32>\Tasks\Microsoft\Windows Defender\MP Scheduled Scan
- 'a.###tboss.us':80
- a.###tboss.us/updata.php
- DNS ASK a.###tboss.us
- ClassName: '#32770' WindowName: 'Windows ??????????'