Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MSN' = '%WINDIR%\msncom.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'HW Upgrade' = '%WINDIR%\hwupgrade.exe'
- '%WINDIR%\hwupgrade.exe'
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\downcontroller[2]
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\downcontroller[1]
- %WINDIR%\hwupgrade.exe
- %WINDIR%\hwupgrade.exe
- 'zv###uga.com.ua':80
- zv###uga.com.ua/downcontroller/?af#######################
- DNS ASK zv###uga.com.ua