Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{AC842DA1-032C-B0FB-9058-7CBFFC02EDB8}] 'StubPath' = '<SYSTEM32>\syspols.exe'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\syspols.exe
- 'ph#.##abdance.com':8080
- DNS ASK ph#.##abdance.com