Техническая информация
- C:\1.bin
- [<HKLM>\SYSTEM\ControlSet001\Services\Диспетчер системных COM+] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '<SYSTEM32>\svhost.EXE' = '<SYSTEM32>\svhost.EXE:*:Enabled:svhost'
- <SYSTEM32>\svhost.EXE
- outpost.exe
- [<HKLM>\Software\Ghisler\Windows Commander]
- [<HKCU>\Software\Ghisler\Total Commander]
- [<HKCU>\SOFTWARE\Far\Plugins\FTP\Hosts]
- [<HKLM>\Software\Ghisler\Total Commander]
- [<HKLM>\SOFTWARE\Miranda]
- [<HKCU>\SOFTWARE\Mirabilis\ICQ\NewOwners]
- [<HKCU>\Software\Ghisler\Windows Commander]
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Trillian]
- <SYSTEM32>\svhost.EXE
- C:\1.bin
- '19#.#7.57.26':2525