Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\WinMan] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%WINDIR%\QvodSetupPlus3.exe' = '%WINDIR%\QvodSetupPlus3.exe:*:Enabled:QVOD'
- %WINDIR%\QvodSetupPlus3.exe
- %WINDIR%\alg.exe ScStar
- %WINDIR%\QvodSetupPlus3.exe
- %WINDIR%\USER-\alg.exe
- %WINDIR%\alg.exe
- 'localhost':1043
- 'dd.##gsl.com':87
- 'ww.##nxw.com':8080
- 'up###e.qvod.com':80
- 'ag###.qvod.com':80
- up###e.qvod.com/qd.jpg
- DNS ASK dd.##gsl.com
- DNS ASK st####.sipphone.com
- DNS ASK ww.##nxw.com
- DNS ASK ag###.qvod.com
- DNS ASK up###e.qvod.com
- DNS ASK st##.qvod.com
- DNS ASK tr###.qvod.com
- 'st####.sipphone.com':3478
- 'tr###.qvod.com':80
- '<IP-адрес в локальной сети>':1900
- 'st##.qvod.com':3478
- ClassName: 'Shell_TrayWnd' WindowName: ''