Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'bnpizdkolnlcuwjspernlifpym' = '%APPDATA%\btruqnwcotge.exe'
- %HOMEPATH%\Start Menu\Programs\Startup\klxbvcbw.exe
- %APPDATA%\btruqnwcotge.exe
- DNS ASK rv##rz.com
- DNS ASK www.to####opigeon.org
- DNS ASK vk.com
- DNS ASK ry##gm.com