Техническая информация
- [<HKLM>\SYSTEM\ControlSet003\Services\lagftu] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet002\Services\lagftu] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\lagftu] 'Start' = '00000002'
- <SYSTEM32>\svchost.exe -k lagftu
- <SYSTEM32>\mtrpdv.dll
- <SYSTEM32>\00046f03.ini
- 'ho###.vicp.net':6000
- DNS ASK ho###.vicp.net