Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] '1' = '%HOMEPATH%\Local Settings\MicrosoftUpdate\reader.exe /run'
- %HOMEPATH%\Local Settings\MicrosoftUpdate\reader.exe
- %HOMEPATH%\Local Settings\MicrosoftUpdate\ciner.zip
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\coin[1].zip
- 'af###tstat.biz':80
- af###tstat.biz/ewsdffv/stat.php?vi#####
- af###tstat.biz/ewsdffv/coin.zip
- DNS ASK af###tstat.biz