Техническая информация
- <SYSTEM32>\svchost.exe MZђ
- <SYSTEM32>\svchost.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\random[1].php
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\random[1].php
- 'bo######42.xtreemhost.com':80
- bo######42.xtreemhost.com/random.php
- DNS ASK bo######42.xtreemhost.com