Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\360sf] 'Start' = '00000002'
- %WINDIR%\360sf.exe
- <SYSTEM32>\wbem\360sf.exe
- <SYSTEM32>\wscript.exe "<SYSTEM32>\wbem\1.vbs"
- <SYSTEM32>\wbem\★813540194★1.exe
- %WINDIR%\360sf.exe
- <SYSTEM32>\wbem\1.vbs
- <SYSTEM32>\wbem\360sf.exe
- %WINDIR%\360sf.exe
- 'ww####nnn.3322.org':8000
- DNS ASK ww####nnn.3322.org
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''