Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '' = '%APPDATA%\windowstri.exe'
- %APPDATA%\windowstri.exe
- %APPDATA%\windowstri.exe
- %TEMP%\91bb2c05-935d-4aac-9396-3ee59507f8b0\CliSecureRT.dll
- 'sm##.#omcast.net':587
- DNS ASK sm##.#omcast.net
- ClassName: 'Indicator' WindowName: ''