Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'LightSQL' = '"%APPDATA%\WindowsDatabase\lsql.exe" 3'
- %APPDATA%\WindowsDatabase\lsql.exe 8
- %APPDATA%\WindowsDatabase\lsql.exe 9
- <SYSTEM32>\wbem\Performance\WmiApRpl_new.ini
- %APPDATA%\WindowsDatabase\lsql.exe
- 'am###n000.com':80
- '74.##5.232.51':80
- DNS ASK pa###nsss.com
- DNS ASK am###n000.com
- DNS ASK google.com