Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Office Auto Update] 'Start' = '00000002'
- <SYSTEM32>\Sweep.exe
- <SYSTEM32>\ping.exe 127.0.0.1
- <SYSTEM32>\net1.exe start "Office Auto Update"
- <SYSTEM32>\Sweep.exe
- 'up####.microsoft.co.kr':80
- up####.microsoft.co.kr/photo/CRNJEUFU.jpg
- DNS ASK up####.microsoft.co.kr