Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\3605] 'Start' = '00000002'
- '<SYSTEM32>\sc.exe' Create 3605 binPath= "cmd /c start <SYSTEM32>\shoserstyr.exe" type= own type= interact start= auto
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\2345[1]
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\duba[1]
- <SYSTEM32>\shoserstyr.exe
- 'www.23##.com':80
- 'www.du##.com':80
- 'localhost':1036
- www.23##.com/?k6#######
- www.du##.com/?un#########
- DNS ASK www.23##.com
- DNS ASK www.du##.com
- ClassName: '(null)' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'MS_AutodialMonitor' WindowName: '(null)'
- ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'