Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Rspdates Apxplratioanjrq] 'Start' = '00000002'
- '<SYSTEM32>\svchost.exe' -k netsvcs
- %WINDIR%\TEAM25.reg
- %TEMP%\Xy153875nd.temp
- %WINDIR%\MyInformations.ini
- %WINDIR%\38team.txt
- <SYSTEM32>\tioan.dll
- %WINDIR%\MyInformations.ini
- %WINDIR%\TEAM25.reg
- %WINDIR%\38team.txt
- %TEMP%\Xy153875nd.temp в <SYSTEM32>\tioan.dll
- 'tj####wu.gicp.net':2012
- DNS ASK tj####wu.gicp.net