Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\ProxyService] 'Start' = '00000002'
- <SYSTEM32>\hrht89hw48e.exe service
- C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\CJCTQ25G\1[1].php
- <SYSTEM32>\hrht89hw48e.exe
- 'my##oom.ru':80
- my##oom.ru/1.php
- DNS ASK my##oom.ru