Техническая информация
- <SYSTEM32>\tasks\createexplorershellunelevatedtask
- %WINDIR%\explorer.exe
- <SYSTEM32>\tasks\createexplorershellunelevatedtask
- 'ip##pi.com':80
- '12.##1.146.159':4444
- http://ip##pi.com/line/?fi################
- '12.##1.146.159':4444
- DNS ASK ip##pi.com
- ClassName: 'Progman' WindowName: ''
- ClassName: 'Proxy Desktop' WindowName: ''
- '%WINDIR%\explorer.exe'
- '%WINDIR%\explorer.exe' /NoUACCheck