Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{01306943-6658-8E08-4EA1-9300EE280175}] 'StubPath' = '<SYSTEM32>\two.exe'
- %WINDIR%\Explorer.EXE
- msnmsgr.exe
- <SYSTEM32>\two.exe
- %TEMP%\~DF246F.tmp
- 'tw###o.ns1.name':443
- DNS ASK tw###o.ns1.name