Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'theme' = '%WINDIR%\common32\sys32.exe'
- %WINDIR%\common32\sys32.exe
- <SYSTEM32>\ping.exe 1.0.0.1 -n
- <SYSTEM32>\cmd.exe /c ""%TEMP%\5344.bat" "
- dnf.exe
- %WINDIR%\common32\userinfo.ini
- %WINDIR%\common32\dsound.dll
- %TEMP%\5344.bat
- %WINDIR%\common32\sen.dll
- C:\dsound.dll
- %WINDIR%\common32\sys32.dll
- %WINDIR%\common32\sys32.exe
- 'as##.#otsstos.com':8899
- 'localhost':1036
- DNS ASK as##.#otsstos.com
- '<IP-адрес в локальной сети>':1037