Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Nationalevy] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\Nationaljpr] 'Start' = '00000002'
- '<SYSTEM32>\mqucqg.exe'
- '<SYSTEM32>\duvhui.exe'
- 'C:\Server_77_se.exe'
- 'C:\Server_se.exe'
- <SYSTEM32>\mqucqg.exe
- <SYSTEM32>\duvhui.exe
- C:\Server_77_se.exe
- C:\Server_se.exe
- 'do###.iptime.org':8080
- 'do###.iptime.org':7777
- DNS ASK do###.iptime.org