Техническая информация
- '%TEMP%\Startup\svchost.exe'
- '<SYSTEM32>\reg.exe' add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders" /v Startup /t REG_EXPAND_SZ /d "%temp%\Startup" /f
- %TEMP%\Startup\svchost.exe
- 'cr###snet.net':80
- http://cr###snet.net/info/gate.php?id####################
- DNS ASK cr###snet.net