Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Windows Power Manger System] 'Start' = '00000002'
- %CommonProgramFiles%\Microsoft Shared\MSInfo\angel.exe
- <SYSTEM32>\cmd.exe /c "%CommonProgramFiles%\Microsoft Shared\MSINFO\DaverDel.bat"
- <SYSTEM32>\svchost.exe
- %CommonProgramFiles%\Microsoft Shared\MSInfo\DaverDel.bat
- %WINDIR%\SetupWay.TXT
- %CommonProgramFiles%\Microsoft Shared\MSInfo\angel.exe
- %CommonProgramFiles%\Microsoft Shared\MSInfo\angel.exe
- '20###0.oicp.net':9000
- DNS ASK 20###0.oicp.net