Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Net user onsue 1.0] 'Start' = '00000002'
- '<SYSTEM32>\360.exe'
- '%TEMP%\hrl1.tmp'
- C:\RCX2.tmp
- <SYSTEM32>\hra33.dll
- %TEMP%\hrl1.tmp
- <SYSTEM32>\360.exe
- <SYSTEM32>\hra33.dll
- C:\RCX2.tmp в <SYSTEM32>\hra33.dll
- %TEMP%\hrl1.tmp в %TEMP%\SOFTWARE.LOG
- 'dd##.#odmaycry.com':39
- DNS ASK dd##.#odmaycry.com