Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Windows WAV Server] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\Windows RAR Server] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\Windows Mp3 Server] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\Windows Audio Server] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\Windows SoLo Server] 'Start' = '00000002'
- %WINDIR%\Svchost.exe
- %WINDIR%\Svchost.exe
- %WINDIR%\Svchost.exe
- 'he####n.2288.org':8000
- DNS ASK he####n.2288.org