Техническая информация
- [HKCU\Software\Microsoft\Windows\CurrentVersion\Run] 'Ball' = '%WINDIR%\Ball.exe'
- %CommonProgramFiles(x86)%\201121720167.exe
- %WINDIR%\ball.exe
- DNS ASK ph###.3322.org
- ClassName: '' WindowName: 'Windows Îļþ±£»¤'
- '%CommonProgramFiles(x86)%\201121720167.exe'