Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks] '{D544C22D-1F70-4B1E-873D-D8DABEB26695}' = ''
- %TEMP%\server.exe
- <SYSTEM32>\wbem\wmiadap.exe /R /T
- 360tray.exe
- <SYSTEM32>\wbem\Performance\WmiApRpl_new.ini
- %TEMP%\server.exe
- %CommonProgramFiles%\Microsoft Shared\MSInfo\atmQQ2.dll
- %TEMP%\server.exe
- <SYSTEM32>\wbem\Performance\WmiApRpl_new.ini в <SYSTEM32>\wbem\Performance\WmiApRpl.ini
- <SYSTEM32>\wbem\Performance\WmiApRpl_new.h в <SYSTEM32>\wbem\Performance\WmiApRpl.h
- 'localhost':8082
- ClassName: 'ListBox' WindowName: 'exe_atm'
- ClassName: 'DLL_WindowClass1' WindowName: 'DLL_WindowTitle'
- ClassName: 'ListBox' WindowName: 'dll_atm'