Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{AA8341AE-87E5-0728-00B2-65B59DDD7BF7}] 'StubPath' = '<SYSTEM32>:mspoiscon.exe'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>:mspoiscon.exe
- 'ha###y.7766.org':80
- DNS ASK ha###y.7766.org