Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Netprotocol] 'Start' = '00000002'
- <SYSTEM32>\svchost.exe -k DComLaunch
- <SYSTEM32>\netprotocol.dll
- 'se##end.com':80
- se##end.com/njob.php?nu##############################
- se##end.com/nconfirm.php?re####################
- DNS ASK se##end.com