Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'svchots' = '<SYSTEM32>\cr\svchots.exe'
- '<SYSTEM32>\cr\svchots.exe'
- <SYSTEM32>\cr\svchots.exe
- <SYSTEM32>\cr\svchots.exe
- 'pj###1.ddns.net':6622
- 'fr###eoip.net':80
- fr###eoip.net/xml/
- DNS ASK pj###1.ddns.net
- DNS ASK fr###eoip.net