Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{F4F5BA81-6107-9675-E2C5-C56DCBDBFB89}] 'StubPath' = '<SYSTEM32>\update.exe'
- %WINDIR%\Explorer.EXE
- msnmsgr.exe
- <SYSTEM32>\wbem\Performance\WmiApRpl_new.ini
- <SYSTEM32>\update.exe
- 'fu###.3322.org':53
- 'an###.ns01.us':53
- DNS ASK fu###.3322.org
- DNS ASK an###.ns01.us