Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Ball' = '%WINDIR%\smss.exe'
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\smss.exe
- '%WINDIR%\server.exe'
- '%WINDIR%\server2.exe'
- '<SYSTEM32>\Bindok.exe'
- %WINDIR%\server.exe
- %WINDIR%\smss.exe
- %WINDIR%\Temp\zk.exe
- %WINDIR%\server2.exe
- <SYSTEM32>\BinGo.dll
- <SYSTEM32>\qlyx.sys
- <SYSTEM32>\Bindok.exe
- %WINDIR%\server.exe
- %WINDIR%\server2.exe
- <SYSTEM32>\BinGo.dll
- 'qq####520.f3322.org':8086
- DNS ASK qq####520.f3322.org
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'Indicator' WindowName: '(null)'