Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Camera Mute Control Service] 'Start' = '00000002'
- '%ALLUSERSPROFILE%\Camera\CamMute.exe' 200 0
- '%ALLUSERSPROFILE%\Camera\CamMute.exe' 100 2884
- '%TEMP%\CamMute.exe'
- '<SYSTEM32>\msiexec.exe' 209 2996
- '<SYSTEM32>\svchost.exe' 201 0
- <SYSTEM32>\msiexec.exe
- <SYSTEM32>\svchost.exe
- %ALLUSERSPROFILE%\Camera\CommFunc.dll
- %ALLUSERSPROFILE%\Camera\CommFunc.jax
- %ALLUSERSPROFILE%\Camera\CamMute.exe
- %TEMP%\CamMute.exe
- %TEMP%\CommFunc.dll
- %TEMP%\CommFunc.jax
- %ALLUSERSPROFILE%\Camera\CommFunc.jax
- %ALLUSERSPROFILE%\Camera\CommFunc.dll
- %ALLUSERSPROFILE%\Camera\CamMute.exe
- %TEMP%\CamMute.exe
- 'localhost':12345
- 'sh###.###ountingrecovery.net':443
- DNS ASK sh###.###ountingrecovery.net
- 'sh###.###ountingrecovery.net':443