Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ipsecservice' = '%TEMP%\drWebsrv.exe'
- %TEMP%\drWebsrv.exe
- %TEMP%\drWebsrv.ini
- %TEMP%\drWebsrv.lgo
- %TEMP%\drWebsrv.exe
- '84.##.226.73':80
- 84.##.226.73/index.php
- DNS ASK microsoft.com
- ClassName: 'Indicator' WindowName: ''