Техническая информация
- [<HKLM>\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 'NetWeafeClient' = '<SYSTEM32>\NetWeafe\Client\Client.exe'
- %WINDIR%\syswow64\cmd.exe
- %WINDIR%\syswow64\netweafe\client\client.exe
- DNS ASK cc.###pyrsky.net
- DNS ASK ho###.kaspyrsky.net