Техническая информация
- [<HKLM>\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 'taskmdn.exe' = '"%WINDIR%\tema\taskmdn.exe" -autostart'
- [<HKLM>\System\CurrentControlSet\Services\IKEEXT] 'Start' = '00000002'
- [<HKLM>\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile] 'EnableFirewall' = '00000000'
- [<HKLM>\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'EnableFirewall' = '00000000'
- %WINDIR%\syswow64\yxkey.dll
- %PROGRAMDATA%\microsoft\windows\start menu\programs\startup\360mobilemgr.exe
- ClassName: 'ВµГϳÇÓëÓÂÊ¿' WindowName: 'ВµГϳÇÓëÓÂÊ¿'
- '%WINDIR%\syswow64\netsh.exe' advfirewall set allprofiles state off' (со скрытым окном)
- '%WINDIR%\syswow64\netsh.exe' advfirewall set allprofiles state off