Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] 'AppInit_DLLs' = ' msji449c14b7.dll'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'tserv' = '%WINDIR%\tserv.exe s'
- %WINDIR%\tserv.exe
- DNS ASK ya##o.com
- DNS ASK ww##.###esunjerinkas.com
- DNS ASK gm##l.com
- DNS ASK ho##ail.com
- '%WINDIR%\tserv.exe' s