Техническая информация
- %APPDATA%\Microsoft\Protect\S-1-5-21-2052111302-484763869-725345543-1003\Preferred
- %APPDATA%\Microsoft\Protect\S-1-5-21-2052111302-484763869-725345543-1003\2cb44c4d-872d-406f-bebe-5af02e6c9836
- %APPDATA%\Microsoft\Crypto\RSA\S-1-5-21-2052111302-484763869-725345543-1003\7b7bc2750827c76d5065687e7f189442_23ef5514-3059-436f-a4a7-4cefaab20eb1
- <SYSTEM32>\0c2da726-0143-ee4d-6489-7657def182f2.exe
- %TEMP%\nsf2.tmp\nss3.tmp
- %TEMP%\nsf2.tmp\System.dll
- %TEMP%\nsf2.tmp\UAC.dll
- %TEMP%\nsf2.tmp\Math.dll
- %HOMEPATH%\Local Settings\Temporary Internet Files\172883
- <SYSTEM32>\022f638e-f706-fa7f-efaf-f0641f25d0fe.dll
- %HOMEPATH%\Local Settings\Temporary Internet Files\172883
- 'localhost':1035
- DNS ASK a2.##manet.com