Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{AFA26EE8-EEA3-4626-97C9-9CB3ECEA5C7F}] 'StubPath' = '<SYSTEM32>:hellbot.exe'
- <DRIVERS>\beep.sys
- %WINDIR%\Explorer.EXE
- <SYSTEM32>:hellbot.exe
- 'ip#.##bsersky.com':8080
- DNS ASK ip#.##bsersky.com