Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Print Device Synchronization] 'Start' = '00000002'
- '%ALLUSERSPROFILE%\Application Data\conmin.exe'
- %ALLUSERSPROFILE%\Application Data\svchost.exe
- %ALLUSERSPROFILE%\Application Data\conmin.exe
- %ALLUSERSPROFILE%\Application Data\Irrlicht.dll
- %ALLUSERSPROFILE%\Application Data\svchost.exe
- %ALLUSERSPROFILE%\Application Data\conmin.exe
- %ALLUSERSPROFILE%\Application Data\Irrlicht.dll
- 'xs####789.gicp.net':7065
- DNS ASK xs####789.gicp.net
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'