Техническая информация
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\XSvAp10CntO0u6uc00gIr0RwYy0dk7H0dWn811ell0pDo316N9b0yiD502iF5[1]
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bRCa8q0cN8P0C5uX0A5xI0vMhC081D60kBtN0nBWe0Ao7R10ZAd114Rc03Anm[1]
- <SYSTEM32>\wbem\Performance\WmiApRpl_new.ini
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\XSvAp10CntO0u6uc00gIr0RwYy0dk7H0dWn811ell0pDo316N9b0yiD502iF5[1]
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bRCa8q0cN8P0C5uX0A5xI0vMhC081D60kBtN0nBWe0Ao7R10ZAd114Rc03Anm[1]
- 'sp####lapiurl.com':80
- 'go###ebot.com':80
- sp####lapiurl.com/XSvAp10CntO0u6uc00gIr0RwYy0dk7H0dWn811ell0pDo316N9b0yiD502iF5
- go###ebot.com/bRCa8q0cN8P0C5uX0A5xI0vMhC081D60kBtN0nBWe0Ao7R10ZAd114Rc03Anm
- DNS ASK sp####lapiurl.com
- DNS ASK go###ebot.com
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''