Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'IntelCUI' = '"%ALLUSERSPROFILE%\Intel\IntelRST.exe" '
- '%ProgramFiles%\microsoft office\office14\winword.exe'
- winword.exe
- %ALLUSERSPROFILE%\intel\intelrst.exe
- 'uz######.naveicoipc.tech':80
- http://uz######.naveicoipc.tech/ACMS/1uFnvppj/1uFnvppj64.acm?6V#################
- DNS ASK uz######.naveicoipc.tech