Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Microsoft Madmin] 'Start' = '00000002'
- C:\server.exe
- C:\ХЅ¶УЧЁУГїЁѕш°жµАѕЯ.exe
- <SYSTEM32>\svchost.exe -k netsvcs
- <SYSTEM32>\360SP2.dll
- %TEMP%\E_N4\iext2.fne
- C:\SkinH_EL.dll
- C:\superec.ProcessMemory.sys
- C:\server.exe
- C:\ХЅ¶УЧЁУГїЁѕш°жµАѕЯ.exe
- %TEMP%\E_N4\iext.fnr
- %TEMP%\E_N4\krnln.fnr
- C:\SkinH_EL.dll
- C:\server.exe
- 'yy####-ck.3322.org':1314
- DNS ASK yy####-ck.3322.org
- ClassName: 'Shell_TrayWnd' WindowName: ''