Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\GoogleUpdateBeta] 'Start' = '00000002'
- <LS_APPDATA>\Google\Update\GoogleUpdateBeta.exe /svc
- %TEMP%\nsz3.tmp\nsProcess.dll
- <LS_APPDATA>\Google\Update\GoogleUpdateBeta.exe
- %TEMP%\nse2.tmp
- %TEMP%\nsz3.tmp\System.dll
- %TEMP%\nsz3.tmp\System.dll
- %TEMP%\nsz3.tmp\nsProcess.dll
- 'se#####9.apartmsk.ru':8000
- 'se#####13.ruporno.tv':8000
- 'se#####20.ruporno.tv':8000
- 'se####-8.ruporno.tv':8000
- 'se#####19.ruporno.tv':8000
- 'se####-2.ruporno.tv':8000
- DNS ASK se#####9.apartmsk.ru
- DNS ASK se#####13.ruporno.tv
- DNS ASK se#####20.ruporno.tv
- DNS ASK se####-8.ruporno.tv
- DNS ASK se#####19.ruporno.tv
- DNS ASK se####-2.ruporno.tv