Техническая информация
- '%APPDATA%\countermarching.exe'
- '%CommonProgramFiles%\Microsoft Shared\DW\DW20.EXE' -x -s 1484
- %WINDIR%\syswow64\svchost.exe
- countermarching.exe
- %APPDATA%\countermarching.exe
- %TEMP%\1164578.cvr
- DNS ASK ve####ki-napol.ru
- DNS ASK vi###vka24.ru
- '%WINDIR%\syswow64\svchost.exe' netsvcs