Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'svchost' = '<DRIVERS>\svchost.exe'
- <SYSTEM32>\services.exe
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3] 'Ver' = '3.7'
- <DRIVERS>\svchost.exe
- 'ir#.###uid-security.net':6667
- DNS ASK ir#.###uid-security.net
- ClassName: 'Indicator' WindowName: ''