Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\KingSoft] 'Start' = '00000002'
- '<SYSTEM32>\KingSoft.exe'
- C:\KingSoft
- <SYSTEM32>\set2.et
- <SYSTEM32>\KingSoft.exe
- C:\KingSoft
- 'py####.gnway.net':9887
- 'py##.xicp.net':9887
- 'mi####ft.meibu.net ':9887
- DNS ASK py####.gnway.net
- DNS ASK py##.xicp.net
- DNS ASK mi####ft.meibu.net