Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] 'system32.exe' = '<SYSTEM32>.exe'
- <SYSTEM32>.exe
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\in[1].php
- <SYSTEM32>.exe
- 'w-###-e-z.info':80
- w-###-e-z.info/count/in.php?ve#####
- DNS ASK w-###-e-z.info