Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad] 'onfwbsak' = '{D7F0B039-BAAB-402D-8D2E-4C71D3FF36DC}'
- %TEMP%\desktop_background.zip
- 'on####pro--2008.com':80
- on####pro--2008.com/dw.php?si####################
- DNS ASK on####pro--2008.com