Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\intrasrv] 'Start' = '00000002'
- <SYSTEM32>\intrasrv.exe -service
- <SYSTEM32>\intrasrv.exe
- <SYSTEM32>\cmd.exe /c %WINDIR%\delus.bat
- <SYSTEM32>\services.exe
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\oledb32.dll
- %WINDIR%\delus.bat
- <SYSTEM32>\intrasrv.exe
- <SYSTEM32>\intrasrv.dll
- '21#.#5.133.23':80
- 21#.#5.133.23/intrasrv/banner.dat