Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\3600Svcs] 'Start' = '00000002'
- <SYSTEM32>\server.exe
- <SYSTEM32>\svchost.exe -k NeTSvCS
- C:\Documents and Settings\Local User\Onions.dll
- <SYSTEM32>\server.exe
- <SYSTEM32>\server.exe
- 'ba####11.3322.org':1005
- DNS ASK ba####11.3322.org