Техническая информация
- <SYSTEM32>\dmserver.dll файлом <SYSTEM32>\dmserver.dll
- <SYSTEM32>\dmserver.dll
- '<SYSTEM32>\kms.exe'
- '%PROGRAM_FILES%\Windows Media Player\conime.exe'
- '%PROGRAM_FILES%\Windows Media Player\kmsreset.exe'
- '<SYSTEM32>\cscript.exe' "\ospp.vbs" //b /act
- '<SYSTEM32>\cscript.exe' "\ospp.vbs" //b /remhst
- '<SYSTEM32>\cscript.exe' "\ospp.vbs" //b /inpkey:VYBBJ-TRJPB-QFQRF-QFT4D-H3GVB
- '<SYSTEM32>\cscript.exe' "\ospp.vbs" //b /sethst:127.0.0.1
- %TEMP%\aut1.tmp
- <SYSTEM32>\kms.exe
- %PROGRAM_FILES%\Windows Media Player\conime.exe
- %PROGRAM_FILES%\Windows Media Player\kmsreset.exe
- <SYSTEM32>\kms.exe
- %PROGRAM_FILES%\Windows Media Player\conime.exe
- %TEMP%\aut1.tmp
- <SYSTEM32>\dmserver.dll в <SYSTEM32>\dmservice.dll
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'EDIT' WindowName: '(null)'