Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ws_audio_eax32' = '%TEMP%\sKdKLi.exe'
- '%TEMP%\sKdKLi.exe' "2844"
- %TEMP%\sKdKLi.exe
- %TEMP%\sKdKLi.exe
- 'se###ncheck.biz':80
- se###ncheck.biz/invoke.php?pr######
- DNS ASK se###ncheck.biz
- ClassName: 'Indicator' WindowName: ''