Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '0.8206598' = '<SYSTEM32>\0.8206598.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '0.532478' = '<SYSTEM32>\0.532478.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '(Predeterminado)' = '<SYSTEM32>\DBLIST32.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'QuickTime' = '<SYSTEM32>\QuickTime.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'SoundUpdate' = '<SYSTEM32>\SoundUpdate.exe'
- <SYSTEM32>\reg.exe add hklm\software\microsoft\windows\currentversion\run /v 0.8206598 /t reg_sz /d <SYSTEM32>\0.8206598.exe /f
- <SYSTEM32>\reg.exe add hklm\software\microsoft\windows\currentversion\run /v 0.532478 /t reg_sz /d <SYSTEM32>\0.532478.exe /f
- <SYSTEM32>\reg.exe add hklm\software\microsoft\windows\currentversion\run /v (Predeterminado) /t reg_sz /d <SYSTEM32>\DBLIST32.exe /f
- <SYSTEM32>\reg.exe add hklm\software\microsoft\windows\currentversion\run /v QuickTime /t reg_sz /d <SYSTEM32>\QuickTime.exe /f
- <SYSTEM32>\reg.exe add hklm\software\microsoft\windows\currentversion\run /v SoundUpdate /t reg_sz /d <SYSTEM32>\SoundUpdate.exe /f
- <SYSTEM32>\SystemUpdate.dll
- <SYSTEM32>\0.8206598.exe
- <SYSTEM32>\0.532478.exe
- <SYSTEM32>\QuickTime.exe
- <SYSTEM32>\SoundUpdate.exe
- <SYSTEM32>\DBLIST32.exe
- 'lo######g4h??bel.sytes.net':8888
- DNS ASK lo#######hуbels.tesnet
- '<IP-адрес в локальной сети>':1036