Техническая информация
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'explorer.exe' = '%APPDATA%\abcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstu�'
- %TEMP%\nsr5a12.tmp\ub2b9j1xu4ziyv.dll
- %APPDATA%\abcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyzabcdefghijklmnopqrstuvwxyz\explorer.exe
- 'vo###.hopto.org':5454
- DNS ASK vo###.hopto.org