Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\RPC_Services] 'Start' = '00000002'
- '<SYSTEM32>\svchost.exe' -k netsvcs
- <SYSTEM32>\rpc_Server.dll
- <SYSTEM32>\rpc_Server.dat
- <DRIVERS>\sysdirmr.sys
- <SYSTEM32>\rpc_Server.exe
- 'yo###.3322.org':80
- yo###.3322.org/hole.txt
- DNS ASK yo###.3322.org