Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Systems Center' = '<SYSTEM32>\winspl.exe'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\winspl.exe
- <SYSTEM32>\winspl.exe
- 'my###itblog.com':80
- my###itblog.com/temp/1/stat.php?po#######
- DNS ASK my###itblog.com
- '23#.#55.255.250':1900