Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'SVCH0SAT' = 'c:\SVCH0SAT.EXE'
- 'C:\SVCH0SAT.EXE'
- '<SYSTEM32>\ping.exe' 127.1
- '<SYSTEM32>\cmd.exe' /c c:\~god2.bat
- C:\imetlbb.dll
- C:\SVCH0SAT.EXE
- C:\~god2.bat
- ClassName: 'TianLongBaBu WndClass' WindowName: ''