Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Microsoft.exe' = '%WINDIR%\HSVH0ST.EXE'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{98E233BD-2D08-102B-4ACD-4A7BAC984050}] 'StubPath' = '%WINDIR%\HSVH0ST.EXE'
- %WINDIR%\HSVH0ST.EXE
- 'go######rvice.no-ip.info':81
- DNS ASK go######rvice.no-ip.info