Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] 'AppInit_DLLs' = ',%TEMP%\1234531635don.dll'
- <SYSTEM32>\cmd.exe /c ""%TEMP%\d.bat" "
- %TEMP%\d.bat
- %TEMP%\1234531635don.dll
- '76.##.42.212':80
- 76.##.42.212/123/mail.asp?ps###################