Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'SXzc' = '%PROGRAM_FILES%\Nopqr Tuvwxy\Rlmnop.exe'
- %PROGRAM_FILES%\Nopqr Tuvwxy\Rlmnop.exe
- %PROGRAM_FILES%\Nopqr Tuvwxy\Rlmnop.exe
- 'mm####0.3322.org':2081
- DNS ASK mm####0.3322.org