Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{58CAA5AF-E6E3-7C25-5FA6-11538AE9156C}] 'StubPath' = '<SYSTEM32>\71.exe'
- %WINDIR%\Explorer.EXE
- msnmsgr.exe
- <SYSTEM32>\71.exe
- %TEMP%\~DF1CD9.tmp
- 'hi#####d.dd.blueline.be':443
- DNS ASK hi#####d.dd.blueline.be