Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\ntjnwu] 'Start' = '00000000'
- [<HKLM>\SYSTEM\ControlSet001\Services\skxyti] 'Start' = '00000000'
- [<HKLM>\SYSTEM\ControlSet001\Services\ovnn] 'Start' = '00000000'
- <SYSTEM32>\svchost.exe
- <DRIVERS>\ntjnwu.sys
- <DRIVERS>\skxyti.sys
- <DRIVERS>\ovnn.sys
- 'yy#.#osogirl.cn':80
- DNS ASK yy#.#osogirl.cn