Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\HttpClient\Parameters] 'ServiceDll' = '<SYSTEM32>\mshttp.dll'
- [<HKLM>\SYSTEM\ControlSet001\Services\HttpClient] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\HttpClient] 'ImagePath' = '<SYSTEM32>\svchost.exe -k netvcs'
- <SYSTEM32>\mshttp.dll
- <SYSTEM32>\msvb6O.dll
- 'ks####ta.vicp.net':80
- DNS ASK ks####ta.vicp.net
- '<SYSTEM32>\svchost.exe' -k netvcs