Техническая информация
- %WINDIR%\syswow64\svchost.exe
- %WINDIR%\syswow64\help\0202021dsfsd.ini
- %WINDIR%\syswow64\help\1.nnnoooo
- %WINDIR%\syswow64\help\2.nnnoooo
- %WINDIR%\syswow64\nnnoooo\nnnoooo\aaaaabb\m.ini
- %WINDIR%\2.ini
- %WINDIR%\help\nnnoooo.hlp
- %WINDIR%\syswow64\nnnoooo\nnnoooo\aaaaabb\uuuuvvv.exe
- <SYSTEM32>\spool\drivers\w32x86\3\nnoooon\nnoooon.exe
- D:\recycler\s-1-5-18\dc8\nnoooon\nnoooon000.imd
- D:\recycler\s-1-5-18\dc8\nnoooon\nnoooon001.imd
- D:\recycler\s-1-5-18\dc8\nnoooon\nnoooon002.imd
- D:\recycler\s-1-5-18\dc8\nnoooon\nnoooon003.imd
- D:\recycler\s-1-5-18\dc8\nnoooon\nnoooon004.imd
- D:\recycler\s-1-5-18\dc8\nnoooon\nnoooon005.imd
- D:\recycler\s-1-5-18\dc8\nnoooon\nnoooon006.imd
- D:\recycler\s-1-5-18\dc8\nnoooon\nnoooon007.imd
- D:\recycler\s-1-5-18\dc8\nnoooon\nnoooon008.imd
- D:\recycler\s-1-5-18\dc8\nnoooon\nnoooon009.imd
- D:\recycler\s-1-5-18\dc8\nnoooon\nnoooon010.imd
- '15#.#01.1.91':443
- '%WINDIR%\syswow64\nnnoooo\nnnoooo\aaaaabb\uuuuvvv.exe' -close
- '%WINDIR%\syswow64\svchost.exe' -NetworkService
- '%WINDIR%\syswow64\nnnoooo\nnnoooo\aaaaabb\uuuuvvv.exe' -close (со скрытым окном)