Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{4A202188-F04D-11cf-64CD-31FFAFEECF20}] 'StubPath' = '<SYSTEM32>\winlogo.exe'
- '<SYSTEM32>\winlogo.exe'
- <SYSTEM32>\winlogo.exe
- 'wo####ili.3322.org':8001
- DNS ASK wo####ili.3322.org