Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\netsvcs_0x0] 'Start' = '00000002'
- '%TEMP%\321968.scr' /S
- '%TEMP%\264359.scr' -f "%TEMP%\265203.txt"
- '%TEMP%\264359.scr' -c interface dump
- '%TEMP%\264359.scr' -c interface ip set address "±ѕµШБ¬ЅУ" static 10.1.1.111 255.255.255.0 10.1.1.254 1
- '<SYSTEM32>\svchost.exe' -k netsvcs
- '<SYSTEM32>\cmd.exe' /c %TEMP%\265203.bat
- %TEMP%\321968.scr
- %PROGRAM_FILES%\UserData.dll
- %TEMP%\265203.txt
- %TEMP%\264359.scr
- %TEMP%\265203.bat
- %TEMP%\264359.scr
- %TEMP%\321968.scr
- %TEMP%\265203.txt