Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices] 'WinSvc32.exe' = '<SYSTEM32>\MsSvc16\WinSvc32.exe'
- '<SYSTEM32>\MsSvc16\WinSvc32.exe'
- '%WINDIR%\net32.exe'
- '%WINDIR%\tmp1.exe'
- %WINDIR%\ms32c\pamela screensaver.exe
- <SYSTEM32>\MsSvc16\WinSvc32.exe
- %WINDIR%\net32.exe
- %WINDIR%\regstr.exe
- %WINDIR%\tmp1.exe
- 'sh###r7.mine.nu':6667
- DNS ASK sh###r7.mine.nu
- ClassName: 'Shell_TrayWnd' WindowName: ''