Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'PChome' = '%WINDIR%\ssvhost.exe'
- %APPDATA%\sultansuley.exe
- %WINDIR%\ssvhost.exe
- %APPDATA%\sultansul.exe
- %APPDATA%\sultansuley.exe
- %WINDIR%\ssvhost.exe
- %APPDATA%\sultansul.exe
- 'fe#y.tk':80
- '74.##5.232.51':80
- fe#y.tk/panel/run.php
- DNS ASK fe#y.tk
- DNS ASK www.google.com