Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\.Net CLR] 'Start' = '00000002'
- '%WINDIR%\yykeym.exe'
- '<SYSTEM32>\wscript.exe' "C:\1815.vbs"
- C:\1815.vbs
- %WINDIR%\yykeym.exe
- C:\1815.vbs
- '34####355.f3322.org':2014
- DNS ASK 34####355.f3322.org