Техническая информация
- [<HKLM>\SYSTEM\ControlSet003\Services\fyqjbv] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet002\Services\fyqjbv] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\fyqjbv] 'Start' = '00000002'
- <SYSTEM32>\svchost.exe -k fyqjbv
- <SYSTEM32>\kuxkhx.dll
- <SYSTEM32>\00055b45.ini
- 'li##.##aoyaolong.com':100
- DNS ASK li##.##aoyaolong.com