Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Net ryq] 'Start' = '00000002'
- %WINDIR%\safeie.exe
- %TEMP%\hrl1.tmp
- C:\RCX2.tmp
- <SYSTEM32>\hra33.dll
- %TEMP%\hrl1.tmp
- %WINDIR%\safeie.exe
- <SYSTEM32>\hra33.dll
- C:\RCX2.tmp в <SYSTEM32>\hra33.dll
- %TEMP%\hrl1.tmp в %TEMP%\ZJSC.LOG
- 'im.##rcmd.com':20121
- DNS ASK im.##rcmd.com