Техническая информация
- [<HKLM>\System\CurrentControlSet\Services\wmcodecdspps] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\wmcodecdspps] 'ImagePath' = '"%WINDIR%\SysWOW64\wmcodecdspps\wmcodecdspps.exe"'
- из <Полный путь к файлу> в %WINDIR%\syswow64\wmcodecdspps\wmcodecdspps.exe
- '47.##8.241.179':80
- '24.##4.47.87':80
- http://24.##4.47.87/50BYLsB0y0S/IYT75xi8DKL2M6Pp/8tMa32zwq7MxT9w/xFtnn7vvPan5M0dKfgg/3HwuhqiBNJAxb181B/d8GRWFoNZ7dMYiXxA/