Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'MSE' = '"%TEMP%\<Имя файла>.exe" /cs:0 '
- '<SYSTEM32>\taskkill.exe' /F /IM firefox* /IM mozi*
- '<SYSTEM32>\taskkill.exe' /F /IM MSASCui* /IM avg* /IM ash* /IM McSA* /IM msse*
- AVGCC32.EXE
- AVGCTRL.EXE
- firefox.exe
- avgcc.exe
- ash.exe
- ashAvast.exe
- ashAvSrv.exe
- %TEMP%\<Имя файла>.exe
- 'up#####.myownguardian.net':80
- 'up#####.realtime-guard.net':80
- http://up#####.myownguardian.net/index.php?de#################################
- http://up#####.realtime-guard.net/index.php?de###############################
- DNS ASK up#####.myownguardian.net
- DNS ASK up#####.realtime-guard.net
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: ''