Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\name1] 'Start' = '00000002'
- '%WINDIR%\rb.exe'
- C:\Documents and Settings\LocalService\Local Settings\Application Data\sLT.exf
- %WINDIR%\rb.exe
- 'ki###usa.biz':80
- ki###usa.biz/test/
- DNS ASK ki###usa.biz