Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\Svchost.exe
- '%HOMEPATH%\Start Menu\Programs\Startup\Svchost.exe'
- 'ar.##host.net':80
- 'wp#d':80
- ar.##host.net/download/58268434/250d5483cc54ef78cb8feab6ee77e5c3773e4290/ahmed.exe
- wp#d/wpad.dat
- DNS ASK ar.##host.net
- DNS ASK wp#d