Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'svhost' = '%WINDIR%\svchost.exe'
- %WINDIR%\svchost.exe
- %WINDIR%\repair\w32.dat
- %WINDIR%\repair\rep.dat
- %WINDIR%\svchost.exe
- %WINDIR%\repair\w32.dat
- %WINDIR%\repair\rep.dat
- 'co###e.org.br':80
- co###e.org.br/boletim/080509/log/w32.swf
- DNS ASK co###e.org.br
- ClassName: 'MS_WINHELP' WindowName: ''