Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{mgfnhpoe-ochf-lpkq-bbfm-suchqfeumkim}] 'stubpath' = ''
- <SYSTEM32>\inoavpdfe.exe
- <SYSTEM32>\userinit.exe
- %TEMP%\110984_res.tmp
- <SYSTEM32>\inoavpdfe.exe_lang.ini
- <SYSTEM32>\inoavpdfe.exe
- 'ah####2.codns.com':1026
- DNS ASK ah####2.codns.com