Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{54045855-CQ5Y-AG03-8648-M7WCWA67564V}] 'StubPath' = '%PROGRAM_FILES%\TenCener\conime.pif Restart'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] 'ever' = ''
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run] 'ever' = ''
- <SYSTEM32>\cscript.exe
- %PROGRAM_FILES%\TenCener\conime.pif
- '65##.3322.org':1016
- 'xr##.vicp.cc':1016
- DNS ASK 65##.3322.org
- DNS ASK xr##.vicp.cc