Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\mhwec] 'Start' = '00000000'
- [<HKLM>\SYSTEM\ControlSet001\Services\bcei] 'Start' = '00000000'
- [<HKLM>\SYSTEM\ControlSet001\Services\nvkr] 'Start' = '00000000'
- <SYSTEM32>\svchost.exe
- <DRIVERS>\mhwec.sys
- <DRIVERS>\bcei.sys
- <DRIVERS>\nvkr.sys
- 'yy#.#osogirl.cn':80
- DNS ASK yy#.#osogirl.cn