Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'HKCU' = ''
- <SYSTEM32>\WindowsUpdate\svchost.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\sqlite3[1].dll
- %TEMP%\111140.tmp
- %APPDATA%\SQLite3.dll
- %TEMP%\UuU.uUu
- <SYSTEM32>\WindowsUpdate\svchost.exe
- %TEMP%\XX--XX--XX.txt
- %TEMP%\XxX.xXx
- <SYSTEM32>\WindowsUpdate\svchost.exe
- %TEMP%\XxX.xXx
- %TEMP%\UuU.uUu
- %TEMP%\XX--XX--XX.txt
- 'fr#####s37.dyndns.info':63000
- 'br#####9.fileave.com':80
- 'localhost':1035
- br#####9.fileave.com/sqlite3.dll
- DNS ASK fr#####s37.dyndns.info
- DNS ASK br#####9.fileave.com
- ClassName: 'Indicator' WindowName: ''