Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\RMTCS] 'Start' = '00000002'
- %CommonProgramFiles%\System\svchost.exe
- %CommonProgramFiles%\System\svchost.exe
- 'www.pl##ix.org':80
- '40#.#ahajh.com':405
- www.pl##ix.org/b.exe
- DNS ASK www.pl##ix.org
- DNS ASK 40#.#ahajh.com