Техническая информация
- [<HKLM>\SYSTEM\ControlSet003\Services\mias] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet002\Services\mias] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\mias] 'Start' = '00000002'
- <SYSTEM32>\svchost.exe -k mias
- <SYSTEM32>\fezqib.dll
- <SYSTEM32>\0005c1f1.iNi
- 'qi#####glei.vicp.net':1964
- DNS ASK qi#####glei.vicp.net