Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\] '1806' = '00000000'
- %TEMP%\egp..bat
- DNS ASK vn###ress.net
- DNS ASK ne##og.com
- DNS ASK ho###ay.com.cn
- DNS ASK so###chat.in
- DNS ASK fr#####shutilites.in
- DNS ASK fr####lesarchive.in
- '%WINDIR%\syswow64\cmd.exe' /q /c "%TEMP%\Egp..bat" > nul 2> nul' (со скрытым окном)
- '%WINDIR%\syswow64\cmd.exe' /q /c "%TEMP%\Egp..bat" > nul 2> nul