Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] 'SLDT' = 'rundll32.exe "%TEMP%\0953cf.cpl",BeginTask *5505140407285843030*20*193.105.154.210:80'
- '<SYSTEM32>\rundll32.exe' "%TEMP%\0953cf.cpl",BeginTask *5505140407285843030*20*193.105.154.210:80
- '<SYSTEM32>\cmd.exe'
- <SYSTEM32>\cmd.exe
- %TEMP%\0953cf.cpl
- '19#.#05.154.213':82
- '19#.#05.154.213':81
- '19#.#05.154.210':80
- http://ca##lnxj.cn/stat.php?w=######################################### via 19#.#05.154.210