Техническая информация
- [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] 'WindowsUpdate' = '%APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup\svchost.exe'
- %APPDATA%\microsoft\windows\start menu\programs\startup\svchost.exe
- 'mo###2.space':6621
- 'mo###2.space':6621
- DNS ASK mo###2.space