Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{5B5591DD-1C5E-1197-16BA-50E8F80E3370}] 'StubPath' = '"%TEMP%\sms.exe"'
- %TEMP%\edfc.dkp
- %TEMP%\vrd.exe
- %TEMP%\bvn.exe
- %TEMP%\sms.exe
- 'we####.usciro.com':443
- DNS ASK we####.usciro.com