Техническая информация
- C:\System\SystemKeyLog\SystemFiles\lsiss.exe
- <SYSTEM32>\tskill.exe *Medical*
- <SYSTEM32>\tskill.exe *TaxRecord*
- <SYSTEM32>\tskill.exe *Angelina*
- <SYSTEM32>\ping.exe 127.0.0.1 -n 3
- <SYSTEM32>\tskill.exe *0m3g4*
- <SYSTEM32>\tskill.exe lsiss
- <SYSTEM32>\cmd.exe /c ""C:\System\SystemKeyLog\SystemTemp\Relocate.bat""
- <SYSTEM32>\tskill.exe svchist
- <SYSTEM32>\tskill.exe *Birth*
- <SYSTEM32>\tskill.exe *Resume*
- <SYSTEM32>\svchist.exe
- C:\System\SystemKeyLog\SystemFiles\lsiss.exe
- C:\System\SystemKeyLog\SystemTools\rar
- C:\System\SystemKeyLog\SystemTemp\Relocate.bat
- C:\System\SystemKeyLog\SystemTemp\Relocate.bat
- 'localhost':1035
- DNS ASK www.go###e.com -n 2