Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Winlogon' = '%WINDIR%\scssrr.exe'
- %WINDIR%\scssrr.exe
- 'ad######e.allwebsols.com':80
- ad######e.allwebsols.com/key/asp/jsp/bots.php?na###################
- DNS ASK ad######e.allwebsols.com