Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'bnpizdkolnlcuwjspernlifpym' = '%APPDATA%\btruqnwcotge.exe'
- %HOMEPATH%\Start Menu\Programs\Startup\klxbvcbw.exe
- %APPDATA%\btruqnwcotge.exe
- DNS ASK zf##ie.com
- DNS ASK sr##a.com
- DNS ASK yo##ube.com
- DNS ASK uc#.com