Техническая информация
- [<HKLM>\System\CurrentControlSet\Services\mpsvc_0] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\mpsvc_0] 'ImagePath' = '<SYSTEM32>\svchost.exe -k netsvcs'
- [<HKLM>\system\cURRENTcONTROLsET\sERVICES\mpsvc_0\Parameters] 'ServiceDll' = '%CommonProgramFiles%\qq.cmd'
- 'mpsvc_0' <SYSTEM32>\svchost.exe -k netsvcs
- %CommonProgramFiles%\qq.cmd
- '<LOCALNET>.36.169':80
- '%WINDIR%\syswow64\svchost.exe' -k netsvcs