Техническая информация
- [<HKLM>\SYSTEM\ControlSet003\Services\Computer] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet002\Services\Computer] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\Computer] 'Start' = '00000002'
- <SYSTEM32>\svchost.exe -k Computer
- <SYSTEM32>\ofuyyz.dll
- <SYSTEM32>\0004dab7.sys
- 'to####.twbbs.org':2012
- DNS ASK to####.twbbs.org
- '<IP-адрес в локальной сети>':1035