Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\WindowsPrintBewHelps] 'Start' = '00000002'
- '<SYSTEM32>\winbls.exe'
- 'C:\hfs_21147.exe'
- 'C:\1.exe'
- '<SYSTEM32>\svchost.exe'
- <SYSTEM32>\winbls.exe
- C:\test.tmp
- <DRIVERS>\PCIDump.sys
- C:\1.exe
- C:\hfs_21147.exe
- <SYSTEM32>\winbls.exe
- C:\1.exe
- C:\test.tmp
- 'www.ne##dos.cn':8888
- DNS ASK www.ne##dos.cn
- ClassName: 'Shell_TrayWnd' WindowName: ''