Техническая информация
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\Syetems32.exe
- [<HKLM>\SYSTEM\ControlSet001\Services\Windows Test My Test 1.0] 'Start' = '00000002'
- '<SYSTEM32>\jwdvwy.exe'
- <SYSTEM32>\jwdvwy.exe
- <SYSTEM32>\jwdvwy.exe
- 'pa####fei.f3322.org':528
- DNS ASK pa####fei.f3322.org