Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '360safeman' = '<SYSTEM32>\Vanxkl.exe'
- <SYSTEM32>\smss.exe
- <SYSTEM32>\al.ini
- <SYSTEM32>\PulgFile.log
- <SYSTEM32>\al.ini
- 'kz.#z5n.com':882
- 'kz.#pug.com':882
- 'localhost':1035
- 'pu.#pug.com':882
- DNS ASK kz.#pug.com
- DNS ASK kz.#z5n.com
- DNS ASK pu.#pug.com