Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'Pa2' = 'wscript "%HOMEPATH%\coc\Om5.vbs"'
- %WINDIR%\win.ini
- %HOMEPATH%\coc\om5.exe
- %HOMEPATH%\coc\om5.vbs
- DNS ASK de###kkl.com
- DNS ASK bi###xis.top
- DNS ASK du##ice.com
- DNS ASK sh##ffic.eu
- '%HOMEPATH%\coc\om5.exe'