Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\WinService] 'Start' = '00000002'
- <SYSTEM32>\service.exe
- <SYSTEM32>\service.exe /install
- <SYSTEM32>\service.exe /remove
- <SYSTEM32>\service.exe
- 'localhost':1039
- 'cc###.3322.org':8089
- 'localhost':1035
- 'cc###.3322.org':806
- DNS ASK cc###.3322.org
- ClassName: '' WindowName: 'xx-!@#$xx'