Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{gvet11zg-2all-zm73-mci1-0uw61z0oih1d}] 'stubpath' = ''
- <SYSTEM32>\assembly\inyjbrycn.exe ZhuDong
- %TEMP%\140625_res.tmp
- <SYSTEM32>\assembly\inyjbrycn.exe
- <SYSTEM32>\assembly\inyjbrycn.exe_lang.ini
- 'ta##.#erveblog.net':3434
- DNS ASK ta##.#erveblog.net