Техническая информация
- [<HKLM>\SYSTEM\ControlSet003\Services\fwnoqx] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet002\Services\fwnoqx] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\fwnoqx] 'Start' = '00000002'
- '<SYSTEM32>\svchost.exe' -k fwnoqx
- <SYSTEM32>\reesov.sco
- <SYSTEM32>\reesov.dll
- 'qw##.3322.org':8888
- DNS ASK qw##.3322.org