Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Windows Services Host' = '"%APPDATA%\System\svchost.exe" 3'
- '%APPDATA%\System\svchost.exe' 2
- %APPDATA%\System\svchost.exe
- 'sp####reecourse.com':80
- '74.##5.232.51':80
- DNS ASK bu#####ishspeakup.com
- DNS ASK sp####reecourse.com
- DNS ASK google.com