Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\RemoteRegistry] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\BITS] 'Start' = '00000002'
- <SYSTEM32>\cmd.exe /c ""<SYSTEM32>\ServiceClient.bat" "
- <SYSTEM32>\ServiceClient.bat
- <SYSTEM32>\Client.bat
- <SYSTEM32>\qmqr.dll
- <SYSTEM32>\regsac.dll
- <SYSTEM32>\qmqr.dll
- <SYSTEM32>\regsac.dll
- 'localhost':4572