Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Windows' = '%TEMP%\Hqylt+yl.exe'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{254F4E25-A65F-2764-0003-070806050704}] 'StubPath' = '%TEMP%\Hqylt+yl.exe'
- 'yh####.hopto.org':443
- DNS ASK yh####.hopto.org
- ClassName: 'Indicator' WindowName: ''