Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{C536ECD6-4AE9-5C39-E359-F046B948DA4E}] 'StubPath' = '<SYSTEM32>:mstscmles.exe'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>:mstscmles.exe
- 'mm####oo.3322.org':80
- DNS ASK mm####oo.3322.org