Техническая информация
- [<HKLM>\System\CurrentControlSet\Services\hGu8YnFXI64xG6fq] 'ImagePath' = '<SYSTEM32>\hGu8YnFXI64xG6fq.sys'
- 'hGu8YnFXI64xG6fq' <SYSTEM32>/hGu8YnFXI64xG6fq.sys
- 'hGu8YnFXI64xG6fq' <SYSTEM32>\hGu8YnFXI64xG6fq.sys
- C:\mac.ini
- <SYSTEM32>\hgu8ynfxi64xg6fq.sys
- <SYSTEM32>\hgu8ynfxi64xg6fq.sys
- 'ba####yeclubs.com':888
- http://www.ba#####eclubs.com:888/kss_io/io.php?v=################################################ via ba####yeclubs.com
- DNS ASK ba####yeclubs.com
- '<SYSTEM32>\cmd.exe' /c pause