Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\.Net CLR] 'Start' = '00000002'
- <SYSTEM32>\svchost.exe -k ".Net CLR"
- ClassName: 'OLLYDBG' WindowName: ''
- ClassName: 'FileMonClass' WindowName: ''
- <SYSTEM32>\18aa7.dll
- 'pr###.dontexist.com':21
- DNS ASK pr###.dontexist.com
- ClassName: '18467-41' WindowName: ''