Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\riodrv32] 'Start' = '00000002'
- <DRIVERS>\riodrv32.sys
- %WINDIR%\Temp\~Thumbbs.TMP
- %HOMEPATH%\riodrv32.sys
- %HOMEPATH%\netui.dll
- <SYSTEM32>\netui.dll
- 'qw##.#yghuri.com':9311
- DNS ASK qw##.#yghuri.com