Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Windows WAV Server] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\Windows RAR Server] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\Windows Mp3 Server] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\Windows Audio Server] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\Windows SoLo Server] 'Start' = '00000002'
- %WINDIR%\Svchost.exe
- %WINDIR%\Svchost.exe
- 'ip##8.com':80
- 'www.ip##8.com':80
- 'www.ba##u.com':80
- ip##8.com/ips.asp?ip#############
- www.ip##8.com/ip2city.asp
- www.ba##u.com/
- DNS ASK ip##8.com
- DNS ASK www.ip##8.com
- DNS ASK www.ba##u.com