Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\TranscendQuickLoad] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'DoNotAllowExceptions' = '00000000'
- <SYSTEM32>\TranscL.exe
- <SYSTEM32>\svchost.exe
- <SYSTEM32>\TranscL.exe
- 'www.by###ode.biz':80
- www.by###ode.biz/vusdbg/stat.php
- www.by###ode.biz/vus/in.php
- DNS ASK www.by###ode.biz