Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\ose] 'Start' = '00000002'
- %CommonProgramFiles%\OSE.EXE
- ClassName: '#32770' WindowName: 'Windows File Protection'
- %CommonProgramFiles%\OSE.EXE
- '20###.63810.com':80
- 20###.63810.com/update/version.txt
- DNS ASK 20###.63810.com
- ClassName: '#32770' WindowName: 'Windows ????????'