Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'mrcserivce' = '"%PROGRAM_FILES%\mrc\rc.exe"'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'mrcserivce' = '"<APATH_<Служебное имя>.EXE>"'
- [<HKLM>\SYSTEM\ControlSet001\services\wdxsk] 'Start' = '00000000'
- [<HKLM>\SYSTEM\ControlSet001\services\mrcservice] 'Start' = '00000002'
- '%PROGRAM_FILES%\mrc\rc.exe'
- <DRIVERS>\wdxsk.sys
- %WINDIR%\KBD08C.txt
- %PROGRAM_FILES%\mrc\rcdll.dll
- %PROGRAM_FILES%\mrc\rc.exe
- DNS ASK dn#.##ftncsi.com
- DNS ASK al#####16h.wit168.com
- ClassName: 'Shell_TrayWnd' WindowName: ''