Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe' = '%WINDIR%\M...
- '<SYSTEM32>\schtasks.exe' /Create /SC MINUTE /MO 2 /TN doggo /F /tr %APPDATA%\Google\chrome.exe
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%WINDIR%\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe" "MSBuild.exe" ENABLE
- '<SYSTEM32>\cmd.exe' /c "%APPDATA%\Google\twzO.bat"
- '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe'
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
- %APPDATA%\Google\twzO.bat
- %APPDATA%\Google\chrome.exe
- 'do########g.software-updates.xyz':12203
- DNS ASK do########g.software-updates.xyz