Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\SuperProServer] 'Start' = '00000002'
- '%WINDIR%\Terms.EXE'
- '<SYSTEM32>\wscript.exe' "C:\9930.vbs"
- C:\9930.vbs
- %WINDIR%\Terms.EXE
- C:\9930.vbs
- 'yu#####8696.f3322.org':2014
- DNS ASK yu#####8696.f3322.org