Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\gbpdist] 'Start' = '00000002'
- 'C:\Progresso.exe'
- 'C:\Progresso.exe' (загружен из сети Интернет)
- C:\Progresso.exe
- 'po####download.org':80
- po####download.org/images/imagem9.jpg
- DNS ASK po####download.org