Техническая информация
- [<HKLM>\SYSTEM\ControlSet003\Services\upphost] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet002\Services\upphost] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\upphost] 'Start' = '00000002'
- <SYSTEM32>\svchost.exe -k upphost
- <SYSTEM32>\vxajgm.dll
- <SYSTEM32>\000455f6.sys
- 'to####.twbbs.org':808
- DNS ASK to####.twbbs.org
- '<IP-адрес в локальной сети>':1035