Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Microsoft Remote Station] 'ImagePath' = '"%WINDIR%\system\mplayer.exe"'
- [<HKLM>\SYSTEM\ControlSet001\Services\Microsoft Remote Station] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%WINDIR%\system\mplayer.exe' = '%WINDIR%\system\mplayer.exe:*:Enabled:...
- '%WINDIR%\system\mplayer.exe'
- '%WINDIR%\system\mplayer.exe'
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram mplayer.exe RIOTBOT ENABLE
- %WINDIR%\Explorer.EXE
- ClassName: 'pediy06' WindowName: ''
- ClassName: 'GBDYLLO' WindowName: ''
- ClassName: 'OLLYDBG' WindowName: ''
- ClassName: 'MSNHiddenWindowClass' WindowName: ''
- %WINDIR%\system\mplayer.exe
- %WINDIR%\system\mplayer.exe
- '72.#4.146.8':81
- ClassName: 'AIM_CSignOnWnd' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''