Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'sqlhost' = '%WINDIR%\sqlhost.exe'
- C:\x.log
- %WINDIR%\sqlhost.exe
- %WINDIR%\_seed
- C:\x.log
- 'li###1045.in':80
- http://li###1045.in/admin/z.php
- DNS ASK li###1045.in
- ClassName: 'Indicator' WindowName: ''