Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'run' = '<SYSTEM32>:Alg.exe'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{33C2F589-85B9-B3E1-86A3-4E185C9544F6}] 'StubPath' = '<SYSTEM32>:Alg.exe'
- <SYSTEM32>\ctfmon.exe
- %WINDIR%\Explorer.EXE
- <SYSTEM32>:Alg.exe
- 'aw##.##ndns-wiki.com':81
- DNS ASK aw##.##ndns-wiki.com