Техническая информация
- [<HKLM>\System\CurrentControlSet\Services\Windows Ineser] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\Windows Ineser] 'ImagePath' = '%WINDIR%\Installer\10As281c1.exe'
- 'Windows Ineser' %WINDIR%\Installer\10As281c1.exe
- %TEMP%\ixp000.tmp\1.exe
- %WINDIR%\installer\10as281c1.exe
- %WINDIR%\uninstal.bat
- %WINDIR%\installer\10as281c1.exe
- %TEMP%\ixp000.tmp\1.exe
- '36###2.oicp.net':8000
- DNS ASK 36###2.oicp.net
- '%TEMP%\ixp000.tmp\1.exe'
- '%WINDIR%\installer\10as281c1.exe'
- '%TEMP%\ixp000.tmp\1.exe' ' (со скрытым окном)
- '%WINDIR%\syswow64\cmd.exe' /c %WINDIR%\uninstal.bat' (со скрытым окном)
- '%WINDIR%\syswow64\cmd.exe' /c %WINDIR%\uninstal.bat