Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{537ACDEF-2672-3341-CCEA-2BE4DE1673DF}] 'StubPath' = '"<SYSTEM32>\autocheck.exe" NetSpoolPtr'
- [<HKLM>\SYSTEM\ControlSet001\Services\AdaptecAIC] 'ImagePath' = '<SYSTEM32>\autocheck.sys'
- '<SYSTEM32>\cmd.exe' /c <Текущая директория>\SystemCheck.bat
- <Текущая директория>\SystemCheck.bat
- <SYSTEM32>\Config.tbl
- <SYSTEM32>\ffffz201612101527ca.tmp
- <SYSTEM32>\countryfix.dll
- <SYSTEM32>\autocheck.exe
- <SYSTEM32>\autocheck.sys
- <SYSTEM32>\ffffz201612101527ca.tmp
- 'ed###aper.com':80
- http:///bulletin/yahoo/banner4.php?jp########## via ed###aper.com
- http://ed###aper.com/bulletin/yahoo/banner4.php?jp##########
- DNS ASK ed###aper.com
- DNS ASK www.microsoft.com