Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\netsvcs_0x0] 'Start' = '00000002'
- <SYSTEM32>\svchost.exe -k netsvcs
- %ALLUSERSPROFILE%\DRM\npkvia1.dll
- 'pa###.gnway.net':443
- 'im#.#nway.net':443
- DNS ASK pa###.gnway.net
- DNS ASK im#.#nway.net