Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\22] 'Start' = '00000002'
- <SYSTEM32>\ServerPack.exe
- %TEMP%\ServerPack.exe
- %TEMP%\fantasy.exe
- <SYSTEM32>\ServerPack.exe
- %TEMP%\ServerPack.exe
- %TEMP%\fantasy.exe
- <SYSTEM32>\ServerPack.exe
- %TEMP%\ServerPack.exe
- 'localhost':8000
- DNS ASK br###.3322.org
- DNS ASK br#.#eibu.com
- DNS ASK au##.#airimeng.com
- DNS ASK br#.noip.cn
- 'br###.3322.org':9876
- 'br#.#eibu.com':9876
- 'br#.noip.cn':9876
- 'au##.#airimeng.com':9876
- ClassName: 'Shell_TrayWnd' WindowName: ''