Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\TCPIPPORT] 'Start' = '00000001'
- [<HKLM>\SYSTEM\ControlSet001\Services\BITS] 'Start' = '00000002'
- '%TEMP%\tmp1.tmp'
- '<SYSTEM32>\ping.exe' localhost -n 1
- '<SYSTEM32>\svchost.exe' -k netsvcs
- <SYSTEM32>\tcpipport.sys
- <SYSTEM32>\midimapest.dll
- %TEMP%\tmp1.tmp
- <SYSTEM32>\tcpipport.sys
- <SYSTEM32>\midimapest.dll
- 'kh##.#oodcosy.com':8000
- DNS ASK www.sr##.co.kr
- DNS ASK kh##.#oodcosy.com