Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\svchest20248] 'Start' = '00000002'
- <SYSTEM32>\svchost.exe /k netsvcs
- %CommonProgramFiles%\Hiv.ini
- %CommonProgramFiles%\svchest20248.tmp
- %CommonProgramFiles%\svchest20248.tmp
- %CommonProgramFiles%\Hiv.ini
- 'wa#####gzhi.9966.org':8092
- DNS ASK wa#####gzhi.9966.org