Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\BSP.NET State Service] 'Start' = '00000002'
- '<DRIVERS>\update.bat'
- '<SYSTEM32>\cmd.exe' /c %TEMP%\3947.bat
- %TEMP%\3947.bat
- <DRIVERS>\update.bat
- %TEMP%\30959.tmp
- <DRIVERS>\update.bat
- 'ai####mama.vicp.net':8000
- DNS ASK ai####mama.vicp.net