Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ZxsSoft' = '<SYSTEM32>\svch0st.exe'
- '<SYSTEM32>\svch0st.exe'
- <SYSTEM32>\P.ini
- <SYSTEM32>\tc.txt
- <SYSTEM32>\svch0st.exe
- %TEMP%\~DF5409.tmp
- 'ws####.f3322.org':8888
- DNS ASK ws####.f3322.org