Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'sos' = '%HOMEPATH%\Templates\lIHiQ.exe.exe'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{B4FA7850-F975-633F-BCB6-DD2C8694FC98}] 'StubPath' = '%HOMEPATH%\Templates\lIHiQ.exe.exe'
- %HOMEPATH%\Templates\lIHiQ.exe.exe
- %HOMEPATH%\Templates\lIHiQ.exe.exe
- 'sa####et.mine.nu':3460
- DNS ASK sa####et.mine.nu