Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'WDDBS.EXE' = '%WINDIR%\DBS.EXE /Auto'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] 'WDDBS.EXE' = '%WINDIR%\DBS.EXE /Auto'
- '%WINDIR%\DBS.EXE'
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\Temp0.bat" "
- %TEMP%\Temp0.bat
- %WINDIR%\DBS.KDat
- %WINDIR%\DBS.EXE
- 'localhost':8090