Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Blue Consulting Updater] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\Blue Consulting] 'Start' = '00000002'
- %WINDIR%\Blue Consulting\Blue.exe (загружен из сети Интернет)
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\Blue_Consulting_Updater[1].exe
- %WINDIR%\Blue Consulting\Blue_Updater.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\Blue_Consulting[1].exe
- %WINDIR%\Blue Consulting\Blue.exe
- 'lo######w.hosting-bar.de':80
- 'localhost':1035
- lo######w.hosting-bar.de/software/Blue_Consulting_Updater.exe
- lo######w.hosting-bar.de/software/Blue_Consulting.exe
- DNS ASK lo######w.hosting-bar.de
- '<IP-адрес в локальной сети>':1036