Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\BITS] 'Start' = '00000002'
- <SYSTEM32>\setup.exe
- %WINDIR%\231065909
- %WINDIR%\BIT1.tmp
- %WINDIR%\123171.t
- 'ev####-counter.info':80
- 'localhost':1038
- 'wp#d':80
- ev####-counter.info/ldr/index.php?s=####################
- wp#d/wpad.dat
- DNS ASK ev####-counter.info
- DNS ASK wp#d