Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Microsoft Certified Professional servrce] 'Start' = '00000002'
- '%WINDIR%\Microsoft Certified Professional servrce' -k
- '%WINDIR%\NOTEPAD.EXE'
- '<SYSTEM32>\notepad.exe'
- %WINDIR%\Microsoft Certified Professional servrce
- 'pa##.3322.org':520
- DNS ASK pa##.3322.org
- ClassName: 'MS_WINHELP' WindowName: '(null)'
- ClassName: 'Notepad' WindowName: '(null)'