Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\irpfit] 'Start' = '00000000'
- '<SYSTEM32>\mmc32.exe' /c dir e:\ /s/od/a ><DRIVERS>\espn\183A2C71\e.bak
- <SYSTEM32>\services.exe
- <DRIVERS>\ntmil.sys
- <DRIVERS>\espn\183A2C71\e.bak
- <SYSTEM32>\mmc32.exe
- 'any':0
- DNS ASK an#####us.mnd.mil.tw
- DNS ASK www.mi#.tw