Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Defghi Klmnopqr Tuv] 'Start' = '00000002'
- '<SYSTEM32>\ccuwco.exe'
- <SYSTEM32>\ccuwco.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\count[1].asp
- 'co###.homelinux.org':80
- 'sp#####kr.dynalias.net':5566
- co###.homelinux.org/count.asp?ma################
- DNS ASK co###.homelinux.org
- DNS ASK sp#####kr.dynalias.net