Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\msscenter] 'Start' = '00000002'
- <SYSTEM32>\msscntr32.exe
- <SYSTEM32>\cmd.exe /c """%TEMP%\_tmp32.bat"" "
- %WINDIR%\s32.txt
- %TEMP%\_tmp32.bat
- <SYSTEM32>\msscntr32.exe
- '74.##.106.162':80
- '66.##2.102.169':80
- 74.##.106.162/forum_asp.php
- 66.##2.102.169/forum_asp.php