Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\stisvc] 'Start' = '00000002'
- <SYSTEM32>\net1.exe start
- <SYSTEM32>\systeminfo.exe
- <SYSTEM32>\ipconfig.exe /all
- <SYSTEM32>\svchost.exe -k imgsvc
- <SYSTEM32>\net1.exe user
- %APPDATA%\Microsoft\Network\6B5A4607.CAB
- %WINDIR%\Temp\~00ELISE1D797.TMP
- %APPDATA%\Microsoft\Network\mssrt726.dll
- '20#.#5.216.124':80
- '91.##7.18.85':443
- '91.##7.18.85':80
- 'lo######oworld.dyndns.info':443
- 'lo######oworld.dyndns.info':80
- '20#.#5.216.124':443
- 91.##7.18.85/1/page_00242021.html
- 20#.#5.216.124/1/page_00242020.html
- lo######oworld.dyndns.info/1/page_00242019.html
- DNS ASK lo######oworld.dyndns.info