Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\iCount] 'Start' = '00000002'
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %WINDIR%\Temp\iCount.ini
- %WINDIR%\Temp\WinService.dll
- %WINDIR%\Temp\iCount.ini
- %WINDIR%\Temp\WinService.dll
- 'do##.#nf8090.com':80
- do##.#nf8090.com/seo.jpg
- DNS ASK do##.#nf8090.com