Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Internet-Explorer' = '"%WINDIR%\system\iexplorer.exe"'
- '<SYSTEM32>\wtcps.exe'
- '%WINDIR%\system\mrpsys.exe'
- '%WINDIR%\system\iexplorer.exe'
- <SYSTEM32>\wtcps.exe
- <SYSTEM32>\mps.dll
- %WINDIR%\system\iexplorer.exe
- %WINDIR%\system\mrpsys.exe
- 'go###.go.ohost.de':80
- go###.go.ohost.de/test/new.php
- DNS ASK go###.go.ohost.de