Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Print Device Synchronization] 'Start' = '00000002'
- '%ALLUSERSPROFILE%\Documents\My Pictures\conmin.exe'
- %ALLUSERSPROFILE%\Documents\My Pictures\svchost.exe
- %ALLUSERSPROFILE%\Documents\My Pictures\conmin.exe
- %ALLUSERSPROFILE%\Documents\My Pictures\Irrlicht.dll
- %ALLUSERSPROFILE%\Documents\My Pictures\svchost.exe
- %ALLUSERSPROFILE%\Documents\My Pictures\conmin.exe
- %ALLUSERSPROFILE%\Documents\My Pictures\Irrlicht.dll
- 'xx##xx.com':6380
- DNS ASK xx##xx.com
- ClassName: 'Shell_TrayWnd' WindowName: ''