Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{AFA26EE8-EEA3-4626-97C9-9CB3ECEA5C7F}] 'StubPath' = '<SYSTEM32>:hellbot.exe'
- <DRIVERS>\ip6fw.sys
- %WINDIR%\Explorer.EXE
- <SYSTEM32>:hellbot.exe
- 'by###d.3322.org':3492
- DNS ASK by###d.3322.org