Техническая информация
- [<HKLM>\SYSTEM\CONTROLSET003\Services\cgxjcf] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet002\Services\cgxjcf] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\cgxjcf] 'Start' = '00000002'
- <SYSTEM32>\svchost.exe -k cgxjcf
- <SYSTEM32>\odcklq.exe
- <SYSTEM32>\00055ab8.sys
- 'wo####36.3322.org':1000
- DNS ASK wo####36.3322.org