Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] 'LoadAppInit_DLLs' = '00000001'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] 'AppInit_DLLs' = 'ЎЎ'
- <SYSTEM32>\wbem\ЎЎ.dll
- DNS ASK g.##-b.com
- DNS ASK qq.com