Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'antivirUPD' = '<SYSTEM32>\antivirupd.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'NLOG' = '<SYSTEM32>\NLOG.exe'
- 'C:\Z6DB4246.exe'
- 'C:\Z6DB4246.exe' (загружен из сети Интернет)
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\install_reader11_br_mssa_aaa_a[1].exe
- C:\Z6DB4246.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\SUKERTSEMGB[1].AC4
- C:\MJHU8.AC1
- 'www.4s##red.com':80
- www.4s##red.com/download/7pjU6s9Rba/install_reader11_br_mssa_aaa_a.exe
- www.4s##red.com/download/jb3HMEyIba/SUKERTSEMGB.AC4
- DNS ASK www.4s##red.com
- ClassName: 'Indicator' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'