Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'svhost.exe' = '<SYSTEM32>:winapi.exe'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{873FCB8F-65B4-C4E1-2B27-ADD9824CA9C9}] 'StubPath' = '<SYSTEM32>:winapi.exe'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>:winapi.exe
- 'el##.#s-a-chef.com':3460
- DNS ASK el##.#s-a-chef.com