Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{E384A2D1-7C1A-1E47-65D4-DEC9C7A2B15F}] 'StubPath' = '%WINDIR%:win1ogon.exe'
- %WINDIR%\Explorer.EXE
- msnmsgr.exe
- %WINDIR%:win1ogon.exe
- 'ao####99.3322.org':8009
- 'ap#####005.meibu.com':8009
- DNS ASK ao####99.3322.org
- DNS ASK ap#####005.meibu.com