Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\MediaCenter] 'Start' = '00000002'
- %TEMP%\RarSFX0\ms.exe
- %TEMP%\RarSFX0\uharc.exe e file.uha
- <SYSTEM32>\svchost.exe -k krnlsrvc
- %TEMP%\RarSFX0\ms.exe
- %TEMP%\106734_Ojie.xml
- <SYSTEM32>\wbem\Performance\WmiApRpl_new.ini
- %TEMP%\RarSFX0\uharc.exe
- %TEMP%\RarSFX0\file.uha
- <SYSTEM32>\Prfmgnl.src
- %TEMP%\RarSFX0\uharc.exe
- %TEMP%\RarSFX0\ms.exe
- %TEMP%\RarSFX0\file.uha
- %TEMP%\106734_Ojie.xml в <SYSTEM32>\Prfmgnl.src
- 'any':8080
- 'www.pf##.net':8080
- DNS ASK www.pf##.net
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''