Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\mnsrvc] 'Start' = '00000002'
- <SYSTEM32>\cmd.exe /c "%TEMP%\\110968.bAt"
- <SYSTEM32>\svchost.exe -k mnsrvc
- %TEMP%\110968.bAt
- %CommonProgramFiles%\Services\Common.txt
- %CommonProgramFiles%\Services\Common.txt
- 'to###n.twgg.org':101
- DNS ASK to###n.twgg.org