Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\sysbrmgmt] 'Start' = '00000002'
- '<SYSTEM32>\cmd.exe' /c ""%TEMP%\DW4r67.bat" "
- '<SYSTEM32>\svchost.exe' -k LocalSystemService
- %TEMP%\DW4r67.bat
- <SYSTEM32>\sbrmgmt.dll
- '65.##.193.133':8080
- '11#.#9.208.133':8080