Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Print Device Synchronization] 'Start' = '00000002'
- '%ALLUSERSPROFILE%\Application Data\conmin.exe'
- %ALLUSERSPROFILE%\Application Data\svchost.exe
- %ALLUSERSPROFILE%\Application Data\conmin.exe
- %ALLUSERSPROFILE%\Application Data\Irrlicht.dll
- %ALLUSERSPROFILE%\Application Data\svchost.exe
- %ALLUSERSPROFILE%\Application Data\conmin.exe
- %ALLUSERSPROFILE%\Application Data\Irrlicht.dll
- '50####4.3322.org':7777
- DNS ASK 50####4.3322.org
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'