Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Windows Nine Plugin' = '%WINDIR%\win09.exe'
- %WINDIR%\npf.jpg
- %WINDIR%\win09.exe
- %WINDIR%\npf.jpg
- 'mz##.#ocaldomain':25
- 'ro#####acaca.110mb.com':80
- ro#####acaca.110mb.com/listaaut.jpg
- DNS ASK mz##.##aldomain
- DNS ASK ro#####acaca.110mb.com