Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\winin1t] 'Start' = '00000002'
- '<SYSTEM32>\winin1t.exe' internal_start
- '<SYSTEM32>\net1.exe' start winin1t
- '<SYSTEM32>\sc.exe' create winin1t binpath= "<SYSTEM32>\winin1t.exe internal_start" DisplayName= winin1t start= auto
- <SYSTEM32>\svohost.txt
- <SYSTEM32>\winin1t.exe
- <SYSTEM32>\winin1t.ini
- <SYSTEM32>\svohost.txt
- 'da####03.rexunw.com':7003
- DNS ASK da####03.rexunw.com