Техническая информация
- [<HKLM>\SYSTEM\CONTROLSET003\Services\yjywdj] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet002\Services\yjywdj] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\yjywdj] 'Start' = '00000002'
- '<SYSTEM32>\svchost.exe' -k yjywdj
- <SYSTEM32>\uhzint.com
- <SYSTEM32>\0006ae59.sys
- 'ta###.3322.org':8001
- DNS ASK ta###.3322.org