Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Window Update' = '%PROGRAM_FILES%\Microsoft Window Update\Window Update.exe'
- %PROGRAM_FILES%\Microsoft Window Update\Window Update.exe
- ClassName: '' WindowName: 'Process Monitor - Sysinternals: www.sysinternals.com'
- ClassName: 'PROCMON_WINDOW_CLASS' WindowName: ''
- ClassName: '' WindowName: 'Registry Monitor - Sysinternals: www.sysinternals.com'
- ClassName: 'RegmonClass' WindowName: ''
- ClassName: '' WindowName: 'File Monitor - Sysinternals: www.sysinternals.com'
- ClassName: 'GBDYLLO' WindowName: ''
- ClassName: 'OLLYDBG' WindowName: ''
- ClassName: 'FilemonClass' WindowName: ''
- ClassName: 'pediy06' WindowName: ''
- %PROGRAM_FILES%\Microsoft Window Update\Window Update.exe
- %TEMP%\~DF2A51.tmp
- 'ma#.#aver.com':80
- '11#.#06.138.250':80
- 'bl##.naver.com':80
- ma#.#aver.com/
- bl##.naver.com/PostView.nhn?bl############################################################################################################################################################################################
- DNS ASK ma#.#aver.com
- DNS ASK bl##.naver.com
- '<IP-адрес в локальной сети>':1035
- ClassName: 'TCPViewClass' WindowName: ''
- ClassName: '' WindowName: ''
- ClassName: '18467-41' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''