Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\svchost] 'Start' = '00000002'
- %WINDIR%\svupdate\svchost.exe
- %WINDIR%\svupdate\sv\svchost.exe
- %TEMP%\ivtp.exe
- <SYSTEM32>\sc.exe start svchost
- <SYSTEM32>\sc.exe create svchost binpath= "%WINDIR%\svupdate\sv\svchost.exe" type= own start= auto
- %WINDIR%\svupdate\Infofile
- %WINDIR%\svupdate\svchost.exe
- %TEMP%\ivtp.exe
- %TEMP%\Infofile
- %WINDIR%\svupdate\sv\svchost.exe
- 'pa#####enito.no-ip.org':4500
- DNS ASK pa#####enito.no-ip.org