Техническая информация
- [<HKLM>\SOFTWARE\Wow6432Node\Microsoft\windows\CurrentVersion\Run] 'msinfo' = '"%CommonProgramFiles%\Microsoft Shared\MSINFO\msinfo.exe"'
- %CommonProgramFiles%\microsoft shared\msinfo\msinfo.exe
- %CommonProgramFiles%\microsoft shared\msinfo\msinfo.bat
- %CommonProgramFiles%\microsoft shared\msinfo\msinfo.exe
- 'yc.##olm.xyz':8581
- DNS ASK yc.##olm.xyz
- ClassName: 'MS_WINHELP' WindowName: ''
- '%CommonProgramFiles%\microsoft shared\msinfo\msinfo.exe'
- '%CommonProgramFiles%\microsoft shared\msinfo\msinfo.exe' ' (со скрытым окном)
- '%WINDIR%\syswow64\cmd.exe' /c ""%CommonProgramFiles%\Microsoft Shared\MSINFO\msinfo.bat""' (со скрытым окном)
- '%WINDIR%\syswow64\cmd.exe' /c ""%CommonProgramFiles%\Microsoft Shared\MSINFO\msinfo.bat""