Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\NetSec] 'Start' = '00000002'
- <SYSTEM32>\attrib.exe \wumsvc.dll -s -h
- <SYSTEM32>\svchost.exe -k nets
- <SYSTEM32>\wumsvc.dll
- '14#.#17.164.124':8800
- '21#.#40.192.196':8800
- '11#.#2.228.150':8800
- '14#.#17.164.124':81
- '21#.#40.192.196':81
- '11#.#2.228.150':81
- '14#.#17.164.124':80
- '21#.#40.192.196':80
- '11#.#2.228.150':80
- '14#.#17.164.124':8080
- '21#.#40.192.196':8080
- '11#.#2.228.150':8080
- 14#.#17.164.124/index.asp?se######################################################################
- 21#.#40.192.196/index.asp?se######################################################################
- 11#.#2.228.150/index.asp?se######################################################################