Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\ae777634] 'Start' = '00000002'
- <DRIVERS>\asyncmac.sys
- <SYSTEM32>\svchost.exe
- <SYSTEM32>\ae777634.exe
- %TEMP%\rdl2.tmp
- %TEMP%\rdl1.tmp
- %TEMP%\rdl1.tmp
- %TEMP%\rdl2.tmp
- 'pi###siski.com':80
- pi###siski.com/772/counter.php
- DNS ASK pi###siski.com