Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Kaquqy zactso] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\SVKP] 'Start' = '00000002'
- '%WINDIR%\Cwwgyhq.exe'
- %WINDIR%\Cwwgyhq.exe
- <SYSTEM32>\SVKP.sys
- 'me####2016.gnway.cc':2012
- DNS ASK me####2016.gnway.cc