Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'DoNotAllowExceptions' = '00000000'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'EnableFirewall' = '00000000'
- '<SYSTEM32>\net1.exe' stop alg
- '<SYSTEM32>\regsvr32.exe' /s <SYSTEM32>\ieframe.dll
- '<SYSTEM32>\net.exe' stop alg
- '<SYSTEM32>\netsh.exe' firewall set opmode disable
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\so.ebar520[1]
- 'so.##ar520.com':80
- 'localhost':1036
- so.##ar520.com/
- DNS ASK so.##ar520.com
- ClassName: '(null)' WindowName: '??????'