Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{DFF1EBF4-250B-AF2F-65A6-7CB2410E5E86}] 'StubPath' = '<SYSTEM32>\systemdll.exe'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\systemdll.exe
- 'bl####.bounceme.net':443
- DNS ASK bl####.bounceme.net