Техническая информация
- %HOMEPATH%\Start Menu\Programs\Startup\notep.exe
- '<SYSTEM32>\sc.exe' config wscsvc start= disabled
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\eu2[1].exe
- 'www.am####ostapyk.ca':80
- www.am####ostapyk.ca/wp-content/plugins/profile-pic/eu2.exe
- DNS ASK www.am####ostapyk.ca