Техническая информация
- [<HKLM>\SYSTEM\ControlSet003\Services\lsbbvu] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet002\Services\lsbbvu] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\lsbbvu] 'Start' = '00000002'
- '<SYSTEM32>\svchost.exe' -k lsbbvu
- <SYSTEM32>\muljbt.dll
- <SYSTEM32>\0003cc60.sys
- 'bi####cha.3322.org':2008
- DNS ASK bi####cha.3322.org