Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Nationaluon] 'Start' = '00000002'
- '<SYSTEM32>\ggmogq.exe'
- 'C:\Server - є№»зє» (4).exe'
- <SYSTEM32>\ggmogq.exe
- C:\iexplore.exe
- C:\Server - є№»зє» (4).exe
- 'ys####.codns.com':8080
- DNS ASK ys####.codns.com