Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{E9CD068F-FCE2-BCE3-87BC-6C5A5D825F3D}] 'StubPath' = '<SYSTEM32>:safemode.exe'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>:safemode.exe
- 'hi###8.3322.org':444
- DNS ASK hi###8.3322.org