Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Google Installer' = '%APPDATA%\svchost.exe'
- %APPDATA%\svchost.exe
- 'wh###.#omaintools.com':80
- 'localhost':80
- 'iw##knet.in':80
- wh###.#omaintools.com/iwolknet.inbots.php
- localhost/priv8/bots.php
- iw##knet.in/priv8/bots.php
- DNS ASK wh###.#omaintools.com
- DNS ASK iw##knet.in
- '<IP-адрес в локальной сети>':1035
- ClassName: 'Shell_TrayWnd' WindowName: ''