Техническая информация
- '<SYSTEM32>\sc.exe' config wscsvc start= disabled
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\YF7T7AK2\Lan[1].cpl
- %APPDATA%\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Lan.cpl
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\6P5SDOMI\Java[1].cpl
- %APPDATA%\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Java.cpl
- '10#.#70.56.131':80
- 10#.#70.56.131/~niillrev/scrazy/Loaders/Lan.cpl
- 10#.#70.56.131/~niillrev/scrazy/Loaders/Java.cpl
- 10#.#70.56.131/~niillrev/scrazy/remotaCT/notify.php
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'