Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'svcss' = 'C:\Window\Backup\svcss.exe'
- C:\Window\Backup\csrsc.exe
- C:\Window\Backup\svcss.exe
- C:\Window\Backup\csrsc.exe
- C:\Window\Backup\svcss.exe
- C:\Window\Backup\csrsc.exe
- C:\Window\Backup\svcss.exe
- 'rs###net.info':80
- rs###net.info/ris.php?cm#
- DNS ASK rs###net.info
- ClassName: 'Indicator' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''