Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'provider_conf' = '%APPDATA%\admin\provider'
- %APPDATA%\admin\Set.bin
- %APPDATA%\admin\provider
- 'aj##.##ene-hoster.cc':80
- aj##.##ene-hoster.cc/ip.php
- aj##.##ene-hoster.cc/connect.php
- DNS ASK aj##.##ene-hoster.cc