Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{D6B7ECD5-1E65-656D-C4D3-8AF222892676}] 'StubPath' = '<SYSTEM32>:xcls.exe'
- %WINDIR%\Explorer.EXE
- msnmsgr.exe
- <SYSTEM32>:xcls.exe
- 'mi####.jetos.com':443
- DNS ASK mi####.JetOS.com