Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '<SYSTEM32>\ftp.exe' = '<SYSTEM32>\ftp.exe:*:Enabled:'FTP''
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'DisableNotifications' = '00000001'
- <SYSTEM32>\cmd.exe /c ""<SYSTEM32>\core.bat" "
- <SYSTEM32>\cmd.exe /c ""%WINDIR%\sortit.bat" "
- <SYSTEM32>\sort.exe
- <SYSTEM32>\netsh.exe firewall add allowedprogram <SYSTEM32>\ftp.exe 'FTP' ENABLE
- <SYSTEM32>\ftp.exe -n -i -s:<DRIVERS>\core.sys
- <SYSTEM32>\ftp.exe -n -i -s:<DRIVERS>\config.sys
- <SYSTEM32>\cmd.exe /c ""<SYSTEM32>\java.bat" "
- <SYSTEM32>\cmd.exe /c ""%WINDIR%\fwl.bat" "
- <SYSTEM32>\netsh.exe firewall set notifications mode=DISABLE
- <SYSTEM32>\ftp.exe -n -i -s:<DRIVERS>\java.sys
- <SYSTEM32>\cmd.exe /c ""<SYSTEM32>\system.bat" "
- <SYSTEM32>\java.bat
- <DRIVERS>\java.sys
- <SYSTEM32>\core.bat
- %WINDIR%\list.log
- %WINDIR%\list.txt
- %WINDIR%\sortit.bat
- <DRIVERS>\core.sys
- %WINDIR%\TimeSwain.log
- %WINDIR%\fwl.bat
- %WINDIR%\swain.exe
- <SYSTEM32>\system.bat
- <DRIVERS>\config.sys
- %WINDIR%\WinKey-USER-4BB09A9C02.html
- <DRIVERS>\java.sys
- <DRIVERS>\core.sys
- <DRIVERS>\config.sys
- %WINDIR%\list.txt
- 'localhost':1050
- 'localhost':1047
- 'localhost':1053
- 'localhost':1057
- 'localhost':1055
- 'localhost':1045
- 'localhost':1037
- 'localhost':1035
- 'ft#.##deo.x10.bz':21
- 'localhost':1043
- 'localhost':1040
- DNS ASK ft#.##deo.x10.bz