Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Windowsw Tewst My Tewst 1.1] 'ImagePath' = '%CommonProgramFiles%\csrsw.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Windowsw Tewst My Tewst 1.1] 'Start' = '00000002'
- System
- %CommonProgramFiles%\csrsw.exe
- 'mo###ohash.com':80
- 'mo###ohash.com':3333
- DNS ASK mo###ohash.com
- '%CommonProgramFiles%\csrsw.exe'