Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\cnkysvchost] 'ImagePath' = '%WINDIR%\svchsot.EXE'
- [<HKLM>\SYSTEM\ControlSet001\Services\cnkysvchost] 'Start' = '00000002'
- '<SYSTEM32>\wscript.exe' "C:\4790.vbs"
- '%WINDIR%\svchsot.EXE'
- C:\4790.vbs
- %WINDIR%\svchsot.EXE
- C:\4790.vbs
- '03##.f3322.org':1956
- DNS ASK 03##.f3322.org