Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\cHen00104390AI] 'Start' = '00000002'
- <SYSTEM32>\svchost.exe -k Kernels
- <SYSTEM32>\cHen00104390AI.AI
- %TEMP%\104546_sre.pmt
- <SYSTEM32>\cHen00104390AI.AI
- %TEMP%\104546_sre.pmt в <SYSTEM32>\cHen00104390AI.AI
- 'da##.3322.org':80
- DNS ASK da##.3322.org