Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '' = '<SYSTEM32>\Win32.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\win32 s] 'Start' = '00000002'
- '<SYSTEM32>\Win32.exe'
- <SYSTEM32>\Win32.exe
- 'tj.##2018.net':80
- 'tj.##2018.net':85
- http://tj.##2018.net/count/count.asp?ma################
- DNS ASK tj.##2018.net