Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\360service] 'Start' = '00000002'
- <SYSTEM32>\net1.exe start "systemservicetest"
- <SYSTEM32>\sc.exe create 360service binpath= "%CommonProgramFiles%\123.exe" DisplayName= "systemservicetest" depend= RpcSs start= auto
- <SYSTEM32>\ftp.exe -s:tmp.bat
- <Текущая директория>\tmp.bat
- %TEMP%\~1.bat
- %TEMP%\~1.bat
- %TEMP%\~1.bat
- <Текущая директория>\tmp.bat
- 'www.do######ebushihaoniao.info':21
- 'localhost':1035
- DNS ASK www.do######ebushihaoniao.info