Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\mfc43] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\krnlhelp] 'Start' = '00000002'
- %WINDIR%\mfc43.exe
- <SYSTEM32>\krnlhelp.exe
- %WINDIR%\mfc43.exe
- <SYSTEM32>\krnlhelp.exe
- 'ee#.#x008.cn':80
- 'localhost':8389
- ee#.#x008.cn/ip.txt
- DNS ASK ee#.#x008.cn