Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'system' = '%WINDIR%\system\svchost.exe'
- '%WINDIR%\system\svchost.exe'
- '<SYSTEM32>\reg.exe' add hklm\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v system /t REG_SZ /d %WINDIR%\system\svchost.exe /f
- %WINDIR%\system\svchost.exe
- 'xi####a77.3322.org':8080
- DNS ASK xi####a77.3322.org