Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Control\Print\Providers\723049144] 'Name' = '%TEMP%\srvB64.tmp'
- [<HKLM>\SYSTEM\ControlSet001\Services\srvB64] 'Start' = '00000002'
- <SYSTEM32>\spoolsv.exe
- %TEMP%\srvB64.ini
- %TEMP%\srvB64.tmp
- %TEMP%\srvB64.tmp
- '82.##2.88.10':80
- '94.##.193.20':80
- 82.##2.88.10//srv
- 94.##.193.20/service/listener.php?af#########