Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'WindowsUpdateService' = '%APPDATA%\winsvcn.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%APPDATA%\winsvcn.exe' = '%APPDATA%\winsvcn.exe:*:Enabled:WindowsUpdateService'
- '%APPDATA%\winsvcn.exe'
- %APPDATA%\winsvcn.exe
- %APPDATA%\winsvcn.exe
- 'wi####service.net':81
- DNS ASK pa####images.net
- DNS ASK lu#####re-bilder.net
- DNS ASK kt###mal.net
- DNS ASK wi####service.net
- DNS ASK wi#####updatecenter.net