Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'theme' = '%WINDIR%\com32.exe'
- %WINDIR%\com32.exe
- <SYSTEM32>\ping.exe 1.0.0.1 -n
- <SYSTEM32>\cmd.exe /c ""%TEMP%\2704.bat" "
- dnf.exe
- %WINDIR%\userinfo.ini
- %WINDIR%\dsound.dll
- %TEMP%\2704.bat
- %WINDIR%\sen.dll
- C:\dsound.dll
- %WINDIR%\com32.dll
- %WINDIR%\com32.exe
- 'localhost':1040
- 'as##.#otsstos.com':8899
- 'localhost':1035
- 'as##.#otsstos.com':6688
- DNS ASK as##.#otsstos.com