Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Network DDES] 'Start' = '00000002'
- <SYSTEM32>\svchost.exe -k netsvcs
- <SYSTEM32>\rundll32.exe %TEMP%\kb21.tmp StartWork
- <SYSTEM32>\Netfilter.dll
- %TEMP%\kb21.tmp
- 'ch###.g0ogle.cn':80
- 'ch###.g0ogle.cn':0
- ch###.g0ogle.cn/
- DNS ASK ch###.g0ogle.cn