Техническая информация
- [<HKLM>\SYSTEM\ControlSet003\Services\bewhvv] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\bewhvv] 'Start' = '00000002'
- '<SYSTEM32>\svchost.exe' -kbewhvv
- <SYSTEM32>\ikgrdo.dll
- <SYSTEM32>\000400f1.sys
- 'ms##.3322.org':2009
- DNS ASK ms##.3322.org