Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'XXXXXX579E5A5B VVVVVVrr2unw==' = '%WINDIR%\XXXXXX579E5A5B VVVVVVrr2unw==\svchsot.exe'
- %WINDIR%\XXXXXX579E5A5B VVVVVVrr2unw==\svchsot.exe
- 'www.fz##75.com':8000
- 'www.af##75.com':8000
- 'www.wk##88.com':8000
- DNS ASK www.fz##75.com
- DNS ASK www.af##75.com
- DNS ASK www.wk##88.com
- ClassName: '(null)' WindowName: '??????????????'