Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Syecurity Accounts user] 'Start' = '00000002'
- '%PROGRAM_FILES%\WinRAR\Rbe.exe'
- %TEMP%\73040273.tmp
- %PROGRAM_FILES%\WinRAR\Rbe.exe
- %TEMP%\73040273.tmp в %PROGRAM_FILES%\WinRAR\Rbe.exe
- '73###.rhelper.com':1990
- DNS ASK 73###.rhelper.com
- ClassName: '(null)' WindowName: '????????????????'
- ClassName: '(null)' WindowName: '????????????'
- ClassName: '(null)' WindowName: '???????? ????'