Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\userinit.exe] 'Debugger' = 'execbplay.exe'
- %WINDIR%\Explorer.EXE
- opera.exe
- <SYSTEM32>\execbplay.exe
- DNS ASK bi#####ked.sendsmtp.com
- DNS ASK ci#####rw.servegame.com
- DNS ASK mu#####mex.sytes.net
- DNS ASK ra###rquest.com
- DNS ASK www.google.com
- DNS ASK re##ck.com
- DNS ASK fu##y.net