Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\BITS] 'Start' = '00000002'
- <SYSTEM32>\ppsav_Key.dll
- <SYSTEM32>\ppsav.dll
- %TEMP%\yyy_NewKey
- %TEMP%\yyy_NewKey
- <SYSTEM32>\ppsav.dll в %WINDIR%\Temp\ppsav.dll
- 'qq#####9793.3322.org':3000
- DNS ASK qq#####9793.3322.org