Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'AutoUpdater' = '"%PROGRAM_FILES%\AUTOUP~1\AUTOUP~1.EXE"'
- %PROGRAM_FILES%\AutoUpdate\AutoUpdate.exe
- %TEMP%\AutoUpdate0\setup.inf
- <SYSTEM32>\auto_update_uninstall.log
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\auto_update[1].htm
- %TEMP%\AutoUpdate0\libexpat.dll
- %TEMP%\AutoUpdate0\AutoUpdate.exe
- %TEMP%\AutoUpdate0\auto_update_install.exe
- %TEMP%\AutoUpdate0\auto_update_uninstall.exe
- 'en####.peopleonpage.com':80
- en####.peopleonpage.com/servlets/auto_update
- DNS ASK en####.peopleonpage.com