Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{0949D5DF-5932-04B2-0101-060502050806}] 'StubPath' = '<SYSTEM32>\winservice.exe'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\winservice.exe
- 'up.###systems.com':5858
- DNS ASK up.###systems.com