Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Sun Java 8.0 Service JDK] 'Start' = '00000002'
- %TEMP%\BIG2ND.exe -spe
- %TEMP%\BIG2ND.exe
- <SYSTEM32>\route.exe add 125.39.0.0 MASK 255.255.0.0 10.0.0.0 METRIC 1
- <SYSTEM32>\ntvdm.exe -f -i1
- <SYSTEM32>\find.exe " 255.255.255.255 255.255.255.255 "
- <SYSTEM32>\cmd.exe /c %TEMP%\BIG1ST.bat
- <SYSTEM32>\route.exe print
- %WINDIR%\Temp\scs1.tmp
- %TEMP%\java2.exe
- %TEMP%\job.xml
- %WINDIR%\Temp\scs2.tmp
- %TEMP%\BIG2ND.exe
- %TEMP%\BIG1ST.bat
- <SYSTEM32>\google_guid.dat
- %PROGRAM_FILES%\java8.0\jdk8.0\java.exe
- <SYSTEM32>\google_guid.dat
- %WINDIR%\Temp\scs2.tmp
- %WINDIR%\Temp\scs1.tmp
- 'lu####6005.gicp.net':10001
- 'lu####6005.gicp.net':80
- lu####6005.gicp.net/job.xml
- lu####6005.gicp.net/java2.exe
- DNS ASK lu####6005.gicp.net
- ClassName: 'ConsoleWindowClass' WindowName: 'ntvdm-be0.be4.390001'