Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{2bf41072-b2b1-21c1-b5c1-0305f4155515}] 'StubPath' = '%CommonProgramFiles%\Microsoft Shared\MSInfo\R_Server.exe'
- '%ProgramFiles%\Internet Explorer\IEXPLORE.EXE'
- '<SYSTEM32>\cmd.exe' /c <SYSTEM32>\Deleteme.bat
- IEXPLORE.EXE
- <SYSTEM32>\Deleteme.bat
- %CommonProgramFiles%\Microsoft Shared\MSInfo\R_Server.exe
- %CommonProgramFiles%\Microsoft Shared\MSInfo\R_Server.exe
- 'ge##.#o.2288.org':80
- 'www.ab##23.com':80
- http://ge##.#o.2288.org/
- http://www.ab##23.com/ip.txt
- DNS ASK ge##.#o.2288.org
- DNS ASK www.ab##23.com
- ClassName: 'MS_WINHELP' WindowName: ''