Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'wscontfy' = '<SYSTEM32>:mspnpmgr.exe'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{BD973921-8679-DF23-248D-0528ED9DDD95}] 'StubPath' = '<SYSTEM32>:mspnpmgr.exe'
- %WINDIR%\Explorer.EXE
- msnmsgr.exe
- <SYSTEM32>:mspnpmgr.exe
- 're####on.8866.org':443
- 're####on.xicp.net':8088
- 'dn##.#estcowboy.com':443
- DNS ASK re####on.8866.org
- DNS ASK re####on.xicp.net
- DNS ASK dn##.#estcowboy.com