Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{F2939FD1-69D9-BF45-87C3-627F10FAB7C8}] 'StubPath' = '<SYSTEM32>:toolbars.exe'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>:toolbars.exe
- 'to#####s.serveftp.com':443
- DNS ASK to#####s.serveftp.com