Техническая информация
- [<HKCU>\Software\Microsoft\Command Processor] 'AutoRun' = ''
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = 'explorer.exe'
- '<SYSTEM32>\wuauclt.exe'
- <SYSTEM32>\wuauclt.exe
- 'cl###uttus.com':80
- cl###uttus.com/n6Ra2Z12cXR1cyxib21jbG9fdHV0dHU=
- DNS ASK cl###uttus.com