Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\MSPnPService] 'Start' = '00000002'
- <SYSTEM32>\mspnp71ff.exe
- <SYSTEM32>\netsh.exe firewall add portopening TCP 5222 msdrm
- <SYSTEM32>\netsh.exe firewall add portopening TCP 80 msdrm
- <SYSTEM32>\netsh.exe firewall add portopening TCP 443 msdrm
- <SYSTEM32>\netsh.exe firewall add portopening TCP 5225 msdrm
- <SYSTEM32>\svchost.exe
- <SYSTEM32>\attrib.exe -h "<SYSTEM32>\mspnp71ff.exe"
- <SYSTEM32>\netsh.exe firewall add portopening TCP 2382 msdrm
- <SYSTEM32>\mspnp71ff.exe