Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = 'C:\external.exe'
- C:\pipi_gg_n1u2t3t4.exe
- C:\pipi_gg_n1u2t3t4.exe (загружен из сети Интернет)
- C:\pipi_gg_n1u2t3t4.exe
- 'aa#.#ussx.com':80
- aa#.#ussx.com/pipi_gg_n1u2t3t4.exe
- DNS ASK aa#.#ussx.com
- DNS ASK n1####t4.3322.org
- ClassName: 'Indicator' WindowName: ''