Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Control\Lsa] 'Notification Packages' = ''
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] 'LoadAppInit_DLLs' = '00000001'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] 'AppInit_DLLs' = 'vusehehe.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%WINDIR%\explorer.exe' = '%WINDIR%\explorer.exe:*:Enabled:Explorer'
- Центр обеспечения безопасности (Security Center)
- <SYSTEM32>\vusehehe.dll
- <SYSTEM32>\vewalimu.dll
- <SYSTEM32>\jefugapu
- <SYSTEM32>\dujujewo.dll
- DNS ASK 18.#####################1dd163e0767.nkvt00001.vr03.0.-.261.0.<Служебное имя>.0.200049.uroledup.com