Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\msscenter] 'ImagePath' = '<SYSTEM32>\msscntr32.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\msscenter] 'Start' = '00000002'
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\_tmp32.bat" "
- '<SYSTEM32>\msscntr32.exe'
- %TEMP%\_tmp32.bat
- %WINDIR%\s32.txt
- <SYSTEM32>\msscntr32.exe
- '74.##.106.162':80
- '66.##2.102.169':80
- http://74.##.106.162/forum_asp.php
- http://66.##2.102.169/forum_asp.php