Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{688EB396-F41A-709A-46BB-EC435FD0FD53}] 'StubPath' = '%WINDIR%:winhlp64.exe'
- %WINDIR%\Explorer.EXE
- %WINDIR%:winhlp64.exe
- 'la####de.3322.org':80
- DNS ASK la####de.3322.org