Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Microsoft Core Update Engine] 'Start' = '00000002'
- '<SYSTEM32>\MicrosoftCoreUpdate\svchost.exe'
- '<SYSTEM32>\MicrosoftCoreUpdate\svchost.exe' SERVICE_INSTALL
- <SYSTEM32>\MicrosoftCoreUpdate\svchost.InstallState
- <SYSTEM32>\MicrosoftCoreUpdate\svchost.InstallLog
- <SYSTEM32>\MicrosoftCoreUpdate\svchost.exe
- <SYSTEM32>\MicrosoftCoreUpdate\svchost.exe
- 'rm####te.mooo.com':21
- 'wp#d':80
- wp#d/wpad.dat
- DNS ASK rm####te.mooo.com
- DNS ASK wp#d