Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{901114F6-E5B6-4885-AA61-D939CB8B5315}] 'StubPath' = '%WINDIR%\Fonts\winsock.exe -a'
- %WINDIR%\Fonts\winsock.exe
- <SYSTEM32>\tasklist.exe
- <SYSTEM32>\find.exe /i "winsock.exe"
- <SYSTEM32>\cmd.exe /c %WINDIR%\Fonts\shutdown.bat
- <SYSTEM32>\ping.exe 127.0.0.1 -n 10
- %WINDIR%\Fonts\winsock.exe
- %WINDIR%\Fonts\shutdown.bat
- %WINDIR%\Fonts\winsock.exe
- %WINDIR%\Fonts\shutdown.bat
- %WINDIR%\Fonts\winsock.exe
- 'ta#####g376.3322.org':3344
- DNS ASK ta#####g376.3322.org
- '<IP-адрес в локальной сети>':1035
- ClassName: 'Shell_TrayWnd' WindowName: ''