Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Processo de Host para Serviзos do Windows' = '%WINDIR%\svchost.exe'
- %WINDIR%\svchost.exe
- 'ne#####ojan.no-ip.org':123
- 'ne#####ojan.no-ip.org':588
- DNS ASK ne#####ojan.no-ip.org