Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'explorer' = '%WINDIR%\Wexporer.exe'
- %WINDIR%\Wexporer.exe
- 'xm#####.nanopool.org':14444
- 'up#####video-p.click':80
- http://up#####video-p.click/tracker.php?cn########################
- DNS ASK xm#####.nanopool.org
- DNS ASK up#####video-p.click
- '%WINDIR%\Wexporer.exe'