Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Network Service] 'Start' = '00000002'
- %PROGRAM_FILES%\R_Server.exe
- <SYSTEM32>\svchost.exe
- %PROGRAM_FILES%\R_Server.exe
- %PROGRAM_FILES%\R_Server.exe
- 'qi#####huafen.gicp.net':80
- qi#####huafen.gicp.net/ip.txt
- DNS ASK qi#####huafen.gicp.net
- ClassName: 'MS_WINHELP' WindowName: ''