Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\MediakCentery] 'Start' = '00000002'
- <SYSTEM32>\svchost.exe -k krnlsrvc
- %TEMP%\111312_EfiProc.dll
- 'f}######hg!2.localdomain':1683
- 'tx####nb.3322.org':8881
- DNS ASK F}######HG!2.localdomain
- DNS ASK tx####nb.3322.org