Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'MS-Windows-secretly' = '<SYSTEM32>\servicese.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'EnableFirewall' = '00000000'
- '<SYSTEM32>\servicese.exe'
- <SYSTEM32>\servicese.exe
- '11#.#9.204.175':21