Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'LAPO.exe' = '<SYSTEM32>\LAPO.exe'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{1C788451-6524-C0D3-74E9-D93DB991A49B}] 'StubPath' = '<SYSTEM32>\LAPO.exe'
- %WINDIR%\Explorer.EXE
- msnmsgr.exe
- <SYSTEM32>\LAPO.exe
- 'la####e.sytes.net':3460
- DNS ASK la####e.sytes.net