Техническая информация
- '<SYSTEM32>\schtasks.exe' /create /sc onlogon /tn "svchost.exe" /rl highest /tr "'<Полный путь к файлу>' /startup" /f
- <SYSTEM32>\alg.exe
- %TEMP%\manuals.kx
- %APPDATA%\svchost\Screenshots\02-25-2017\4.12 PM
- %TEMP%\static_19088187.js
- %TEMP%\multicol.css
- 'localhost':6667
- '21#.#83.58.40':6667
- ClassName: 'gallon' WindowName: ''
- ClassName: 'peacetime' WindowName: ''
- ClassName: 'ram' WindowName: ''
- ClassName: 'fan' WindowName: ''
- ClassName: 'sword' WindowName: ''
- ClassName: 'measure' WindowName: ''
- ClassName: 'pounds' WindowName: ''
- ClassName: 'interview' WindowName: ''
- ClassName: 'panels' WindowName: ''
- ClassName: 'pop' WindowName: ''
- ClassName: 'bet' WindowName: ''
- ClassName: 'glance' WindowName: ''
- ClassName: 'howls' WindowName: ''
- ClassName: 'weddings' WindowName: ''
- ClassName: 'calorie' WindowName: ''
- ClassName: 'qualifier' WindowName: ''
- ClassName: 'vibration' WindowName: ''
- ClassName: 'nod' WindowName: ''
- ClassName: 'week' WindowName: ''
- ClassName: 'arrests' WindowName: ''
- ClassName: 'distance' WindowName: ''
- ClassName: 'enclosure' WindowName: ''
- ClassName: 'bangs' WindowName: ''
- ClassName: 'sugar' WindowName: ''
- ClassName: 'towel' WindowName: ''
- ClassName: 'challenge' WindowName: ''
- ClassName: 'writing' WindowName: ''
- ClassName: 'abrasion' WindowName: ''
- ClassName: 'pond' WindowName: ''
- ClassName: 'lieutenants' WindowName: ''