Техническая информация
- [<HKLM>\SOFTWARE\Classes\exefile\shell\open\command] '' = '%WINDIR%\kernel.exe RUN "%1" %*'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'kernel' = '%WINDIR%\kernel.exe'
- %WINDIR%\kernel.exe
- '88.#98.8.15':80
- 88.#98.8.15/~admin/cemetery/version.php
- 88.#98.8.15/~admin/cemetery/data/bot.php?da#########################