Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Power Management' = '"%TEMP%\111111.exe"'
- %TEMP%\111111.exe
- 'l.###aldomain':80
- l.###aldomain/load/task.php?gi################
- DNS ASK l.###aldomain
- ClassName: 'Indicator' WindowName: ''