Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\BITS] 'Start' = '00000002'
- %TEMP%\BIT1.tmp
- %TEMP%\bx18dxv.dat
- %TEMP%\BIT1.tmp в %TEMP%\bx18dxv.dat
- '77.##.228.186':80
- 'localhost':1039
- 'wp#d':80
- http://77.##.228.186/dw.php?co##########################################################
- http://11#.#11.111.1/wpad.dat via wp#d
- DNS ASK wp#d