Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'cammdrvs' = 'C:\Winnt\expolle.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'camm' = '%WINDIR%\expolle.exe'
- %WINDIR%\expolle.exe
- <SYSTEM32>\MSWINSCK.OCX
- '88.##5.215.102':2020
- '88.##5.215.102':2050