Техническая информация
- [<HKLM>\System\CurrentControlSet\Services\SuperProServer] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\SuperProServer] 'ImagePath' = '%WINDIR%\svchost.exe'
- %ProgramFiles%\apppath\n62.dll
- %WINDIR%\svchost.exe
- http://49.###.61.39:2587/N62.jpg via 49.##3.61.39
- '%WINDIR%\svchost.exe'