Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\BITS] 'Start' = '00000002'
- %WINDIR%\Temp\Oath.exe
- %TEMP%\109453_res.tmp
- %WINDIR%\Temp\Oath.exe
- <SYSTEM32>\RtmgtdC.dll
- %WINDIR%\Temp\Oath.exe
- 'pj#####144pj.gicp.net':8001
- DNS ASK pj#####144pj.gicp.net