Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'Stikkende8' = '%HOMEPATH%\SPORTS\IMMURIN.exe'
- ieinstal.exe
- %HOMEPATH%\sports\immurin.exe
- 'do###ploads.com':443
- DNS ASK do###ploads.com
- '%ProgramFiles(x86)%\internet explorer\ieinstal.exe'