Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Microsoft Update' = '<SYSTEM32>\ntservice.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Java Update' = '<SYSTEM32>\keeper.exe'
- <SYSTEM32>\ntservice.exe
- <SYSTEM32>\keeper.exe
- 'bi###exd.info':80
- bi###exd.info//webz/msurl.txt
- DNS ASK bi###exd.info
- ClassName: '' WindowName: 'IINTQQHYYYNRCRBMBMVUWHIMLOWGEOKI'