Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\BITS] 'Start' = '00000002'
- '<SYSTEM32>\svchost.exe' -k netsvcs
- C:\2.HIV
- C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\CJCTQ25G\ip[1].txt
- <SYSTEM32>\systen.dll
- C:\1.HIV
- C:\2.HIV
- C:\1.HIV
- 'www.in####sting-web.com':80
- 'www.in####sting-web.com':800
- www.in####sting-web.com/ip.txt
- DNS ASK www.in####sting-web.com
- DNS ASK www.16#.com