Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\SwPvc] 'Start' = '00000002'
- '<SYSTEM32>\systeminfo.exe'
- '<SYSTEM32>\ipconfig.exe' /aLl
- '<SYSTEM32>\svchost.exe' -k mssvc
- %APPDATA%\Microsoft\Office\1F0E621D.CAB
- %APPDATA%\Microsoft\Office\Plugin.dll
- '21#.#75.53.24':80
- 21#.#75.53.24/1/page_00271831.html