Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\SxS] 'Start' = '00000002'
- %ALLUSERSPROFILE%\Microsoft PA\SxS.exe 200 0
- %ALLUSERSPROFILE%\Microsoft PA\SxS.exe 100 2824
- <SYSTEM32>\msiexec.exe 300 2884
- <SYSTEM32>\svchost.exe 201 0
- %ALLUSERSPROFILE%\Microsoft PA\SxS.exe
- %ALLUSERSPROFILE%\Microsoft PA\boot.pa
- %ALLUSERSPROFILE%\Microsoft PA\boot.cf
- 'su#####.navercorp.com':80
- DNS ASK su#####.navercorp.com
- '8.#.8.8':1035