Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\HostService_75db] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\HostService_75db] 'ImagePath' = '<SYSTEM32>\HostServ_75db.exe'
- <SYSTEM32>\HostServ_75db.exe
- '11#.#19.119.46':80
- http://11#.#19.119.46/
- DNS ASK www.ba##u.com
- '<SYSTEM32>\HostServ_75db.exe'