Техническая информация
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Windows] 'load' = '%PROGRAM_FILES%\Internet Explorer\SPLOKE.exe'
- %PROGRAM_FILES%\Internet Explorer\SPLOKE.exe
- 'li##.##aoyaolong.com':80
- li##.##aoyaolong.com/ip.txt
- DNS ASK li##.##aoyaolong.com