Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run] 'win32' = ''
- %ALLUSERSPROFILE%\Application Data\spoolsv.exe
- %ALLUSERSPROFILE%\Application Data\spoolsv.exe
- 'br###er.ddns.ms':443
- DNS ASK mo####.dns-dns.com
- DNS ASK fa###r.ftp1.biz
- DNS ASK br###er.ddns.ms