Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'SVCSHOST' = '%WINDIR%\9b82e086559f8cae30e25b266f200346.exe'
- %HOMEPATH%\Start Menu\Programs\Startup\9b82e086559f8cae30e25b266f200346.exe
- '8.##ip.com':2014
- DNS ASK 8.##ip.com