Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Computer Support' = '\Windows\System.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Computer Support' = '%APPDATA%\Windows\System.exe'
- %APPDATA%\Imminent\Logs\03-01-2017
- %APPDATA%\Imminent\Path.dat
- %WINDIR%\System.exe
- %APPDATA%\Windows\System.exe
- 'ca###.dynns.com':9003
- DNS ASK ca###.dynns.com