Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Windowsyc] 'Start' = '00000002'
- <SYSTEM32>\calc.exe
- <SYSTEM32>\calc.exe
- %PROGRAM_FILES%\_rejoice.exe
- <SYSTEM32>\rejoice.exe
- <SYSTEM32>\SetupWay.txt
- %PROGRAM_FILES%\_rejoice.exe
- <SYSTEM32>\rejoice.exe
- <SYSTEM32>\SetupWay.txt
- 'wo#####ngcheng.3322.org':8080
- DNS ASK wo#####ngcheng.3322.org
- ClassName: 'TSaxiChristmas' WindowName: ''
- ClassName: 'MS_WINHELP' WindowName: ''
- ClassName: 'TAppBuilder' WindowName: ''