Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\svchosts.lnk
- '%WINDIR%\svchosts.exe'
- '<SYSTEM32>\wscript.exe' "%WINDIR%\Delete.vbs"
- '<SYSTEM32>\net1.exe' stop sharedaccess
- '<SYSTEM32>\net.exe' stop sharedaccess
- %WINDIR%\svchosts.exe
- %WINDIR%\setuplogs.txt
- %WINDIR%\Delete.vbs
- %WINDIR%\1.exe
- %WINDIR%\QQ2.exe
- %WINDIR%\QQ3.exe
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: '(null)' WindowName: 'QQ.exe'