Техническая информация
- [<HKLM>\System\CurrentControlSet\Services\xupdate] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\xupdate] 'ImagePath' = '<DRIVERS>\xupdate.sys'
- 'xupdate' <DRIVERS>\xupdate.sys
- <DRIVERS>\xupdate.sys
- 'do##.xto0.com':3775
- DNS ASK do##.xto0.com
- DNS ASK do##.xia008.com
- DNS ASK do##.suemai.com