Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\SSHNAS] 'Start' = '00000002'
- <SYSTEM32>\rundll32.exe <SYSTEM32>\sshnas21.dll,GetHandle
- iexplore.exe
- firefox.exe
- <SYSTEM32>\sshnas21.dll
- DNS ASK ea###oney.com
- DNS ASK we###fargo.com
- DNS ASK lz##.com