Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\SampleService] 'Start' = '00000002'
- <SYSTEM32>\Ssan.exe
- <SYSTEM32>\Ssam.exe
- C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\CJCTQ25G\jfqu%20ttbk[1].sap
- <SYSTEM32>\Ssam.exe
- <SYSTEM32>\Ssan.exe
- <SYSTEM32>\wbem\Logs\wbemess.lo_
- 'pe###tvaeo.cnh':80
- 'localhost':1035
- pe###tvaeo.cnh/jfqu%20ttbk.sap
- DNS ASK pe###tvaeo.cnh