Техническая информация
- [<HKLM>\SYSTEM\controlSet003\Services\fumhku] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet002\Services\fumhku] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\fumhku] 'Start' = '00000002'
- '<SYSTEM32>\svchost.exe' -k fumhku
- <SYSTEM32>\xhwazd.dll
- <SYSTEM32>\000485e3.ini
- 'da###t.eicp.net':8000
- DNS ASK da###t.eicp.net