Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\NET Runzytime Optimization ServiNET Ruznytime Optimization Service v2.0.50727_X86] 'Start' = '00000002'
- '<SYSTEM32>\svchost.exe' -k krnlsrvcy
- %TEMP%\151250_res.tmp
- <SYSTEM32>\RwmrtwC.dll
- %TEMP%\151250_res.tmp в <SYSTEM32>\RwmrtwC.dll
- 'nb.##fa008.com':12345
- DNS ASK nb.##fa008.com