Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'scvhst' = '<SYSTEM32>\scvhst.exe'
- <SYSTEM32>\net1.exe stop sharedaccess
- <SYSTEM32>\net.exe stop sharedaccess
- <SYSTEM32>\scvhst.exe
- 'ps#.#opto.org':2015
- DNS ASK ps#.#opto.org