Техническая информация
- [<HKLM>\SYSTEM\CONTROLSET003\Services\riserver] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet002\Services\riserver] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\riserver] 'Start' = '00000002'
- '%WINDIR%\hj.exe'
- '<SYSTEM32>\svchost.exe' -k riserver
- <SYSTEM32>\akplgc.fsl
- <SYSTEM32>\4f988.imi
- %WINDIR%\hj.exe
- %WINDIR%\hj.exe
- 'any':0
- 'ho##.#ogo.net.tw':80
- ho##.#ogo.net.tw/user/a27662040/pc.txt
- DNS ASK ho##.#ogo.net.tw
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''