Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run] 'conime' = '%TEMP%\wuauclt.exe'
- '%TEMP%\wuauclt.exe'
- chrome.exe
- %TEMP%\wuauclt.exe
- %TEMP%\wmspd.dll
- 'ch#.##rangled.net':80
- ch#.##rangled.net/home/index.asp?ty#######
- DNS ASK ch#.##rangled.net