Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\RasManklpr] 'Start' = '00000002'
- %CommonProgramFiles%\decak.exe
- <SYSTEM32>\sc.exe Create "RasManklpr" type= own type= interact start= auto DisplayName= "Remote Access Connection Manager " binPath= "cmd.exe /c ""%commonprogramfiles%\AxInstUI33.exe"""
- <SYSTEM32>\sc.exe description "RasManklpr" RasManklpr Remote Access Connection Manager
- <SYSTEM32>\svchost.exe
- <SYSTEM32>\sc.exe delete RasManklpr
- %CommonProgramFiles%\decak.exe
- %CommonProgramFiles%\AxInstUI33.exe
- 'fu####13.6600.org':9191
- 'lo####jy.3322.org':8181
- DNS ASK fu####13.6600.org
- DNS ASK lo####jy.3322.org
- '<IP-адрес в локальной сети>':1035