Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Wsouyi gccuuswc] 'ImagePath' = '%WINDIR%\svchost.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Wsouyi gccuuswc] 'Start' = '00000002'
- '<SYSTEM32>\wscript.exe' "C:\7010.vbs"
- '%WINDIR%\svchost.exe'
- C:\7010.vbs
- %WINDIR%\svchost.exe
- C:\7010.vbs
- 'dh#.#kddos.com':34005
- '33##.ckddos.com':3306
- DNS ASK dh#.#kddos.com
- DNS ASK 33##.ckddos.com