Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Windows Host Process] 'Start' = '00000002'
- %WINDIR%\rundll32.exe
- C:\Documents and Settings\LocalService\Application Data\Microsoft\1
- %WINDIR%\rundll32.exe
- 'sp###easy.net':80
- 'dd##s.in':9835
- DNS ASK sp###easy.net
- DNS ASK dd##s.in