Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Wsoapm Avwpuqho Ycy] 'Start' = '00000002'
- '<SYSTEM32>\svchost.exe' -k sougou
- %PROGRAM_FILES%\Yhfn\Mrjcidfhc.bmp
- C:\Net-Temp.ini
- %PROGRAM_FILES%\Yhfn\Mrjcidfhc.bmp
- C:\Net-Temp.ini
- '11#.#4.148.64':80