Техническая информация
- [<HKLM>\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%APPDATA%\Windows Security Service.exe' = '%APPDATA%\Windows Secur...
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%APPDATA%\Windows Security Service.exe" "Windows Security Service.exe" ENABLE
- %APPDATA%\windows security service.exe
- 'ki######nimalia.ddns.net':5556
- DNS ASK ki######nimalia.ddns.net
- '%APPDATA%\windows security service.exe'
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%APPDATA%\Windows Security Service.exe" "Windows Security Service.exe" ENABLE' (со скрытым окном)