Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\vme_bwipe] 'Start' = '00000001'
- [<HKLM>\SYSTEM\ControlSet001\Services\vme_bwipe] 'ImagePath' = '%CommonProgramFiles%\System\vme_bwipe32.dll'
- '<SYSTEM32>\svchost.exe'
- %CommonProgramFiles%\System\vme_bwipe32.dll
- 'my####-forum.com':80
- my####-forum.com/zamena_stats/index.php?m=#############################################
- DNS ASK my####-forum.com