Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\windows] 'Start' = '00000002'
- '<SYSTEM32>\svchost.exe' -k windows
- <SYSTEM32>\eNQ5qMoO8M.del
- <SYSTEM32>\fzkEzJoU.dll
- <SYSTEM32>\eNQ5qMoO8M.ini
- <SYSTEM32>\eNQ5qMoO8M.del
- 'we##.3322.org':8800
- DNS ASK we##.3322.org