Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'SoftupNotify.exe' = '%ALLUSERSPROFILE%\ЎёїЄКјЎ№ІЛµҐ\ЗїБ¦Р¶ФШµзДФЙПµДИнјю.lnk'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Thunder' = '%WINDIR%\Fonts\conime.exe'
- %WINDIR%\Fonts\conime.exe
- %WINDIR%\Fonts\conime.exe
- 'mu####u.oicp.net':8866
- DNS ASK mu####u.oicp.net