Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\WmdmPMM] 'Start' = '00000002'
- '<SYSTEM32>\net1.exe' start
- '<SYSTEM32>\systeminfo.exe'
- '<SYSTEM32>\ipconfig.exe' /all
- '<SYSTEM32>\svchost.exe' -k lssvcs
- '<SYSTEM32>\net1.exe' user
- %APPDATA%\Microsoft\Network\1A0E621D.CAB
- %WINDIR%\Temp\000ELISEA320.TMP
- %APPDATA%\Microsoft\Network\wincex.dll
- '21#.#44.82.150':80
- 21#.#44.82.150/1/page_00271819.html