Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'XXXXXX48E158E3' = '%WINDIR%\XXXXXX48E158E3.exe'
- %WINDIR%\XXXXXX48E158E3.exe
- 'lh####3.codns.com':2558
- DNS ASK lh####3.codns.com
- ClassName: '' WindowName: 'ИрРЗіМРтЙэј¶ЦР'
- ClassName: '' WindowName: '??????????????'