Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\ServicoMaster] 'Start' = '00000002'
- %ALLUSERSPROFILE%\svchost.exe
- %ALLUSERSPROFILE%\svchost.exe /install /silent
- <SYSTEM32>\locator.exe
- <SYSTEM32>\net1.exe start ServicoMaster
- <SYSTEM32>\cmd.exe /c "%ALLUSERSPROFILE%\comandodos254715.bat"
- %ALLUSERSPROFILE%\comandodos254715.bat
- %ALLUSERSPROFILE%\svchost.exe
- %ALLUSERSPROFILE%\Caminho.tmp
- %ALLUSERSPROFILE%\Caminho.tmp
- 'localhost':7777
- 'any':7777