Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Windows fire wall] 'ImagePath' = '<SYSTEM32>\Windows fire wall.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Windows fire wall] 'Start' = '00000002'
- '<SYSTEM32>\mstsc.exe'
- '<SYSTEM32>\cmd.exe' /c <SYSTEM32>\DelSvel.bat
- '<SYSTEM32>\Windows fire wall.exe'
- '<SYSTEM32>\svchost.exe'
- <SYSTEM32>\mstsc.exe
- <SYSTEM32>\_Windows fire wall.exe
- <SYSTEM32>\DelSvel.bat
- %WINDIR% fire wall.exe
- <SYSTEM32>\Windows fire wall.exe
- C:\AutoRun.inf
- %WINDIR% fire wall.exe
- <SYSTEM32>\_Windows fire wall.exe
- <SYSTEM32>\Windows fire wall.exe
- C:\AutoRun.inf
- 'mb###7.3322.org':8181
- DNS ASK mb###7.3322.org
- ClassName: 'TRE1001HS' WindowName: ''
- ClassName: 'MS_WINHELP' WindowName: ''