Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{C738746D-1392-5622-7AA3-28D8BD4F6234}] 'StubPath' = '%WINDIR%:xeroxe.exe'
- %WINDIR%\Explorer.EXE
- %WINDIR%:xeroxe.exe
- 'in###.servebeer.com':80
- DNS ASK in###.servebeer.com