Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Nationalaiu] 'Start' = '00000002'
- '<SYSTEM32>\rebfec.exe'
- '%TEMP%\witn.exe'
- '%TEMP%\Server.exe'
- <SYSTEM32>\rebfec.exe
- %TEMP%\witn.exe
- %TEMP%\Server.exe
- '21#.#2.159.80':1021
- ClassName: '#32770' WindowName: 'УІјю°ІЧ°'
- ClassName: '#32770' WindowName: '????????'