Техническая информация
- [<HKLM>\SYSTEM\ControlSet003\Services\bhjtlu] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet002\Services\bhjtlu] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\bhjtlu] 'Start' = '00000002'
- <SYSTEM32>\svchost.exe -k bhjtlu
- <SYSTEM32>\ijajaj.dll
- <SYSTEM32>\000552ec.sys
- '5a##.8866.org':1080
- DNS ASK 5a##.8866.org