Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\shadacces ] 'Start' = '00000002'
- '<SYSTEM32>\ svchot.exe' /service
- <SYSTEM32>\ svchot.dat
- <SYSTEM32>\ svchot.exe
- 'xi#####er988.vicp.net':80
- xi#####er988.vicp.net/ip.rar
- DNS ASK xi#####er988.vicp.net
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'