Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{83313942-b21e-454e-b5ae-d01992a63ad5}] 'StubPath' = '"%TEMP%\n3yvzgrsqwSv.exe"'
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Userinit' = '<SYSTEM32>\userinit.exe,%APPDATA%\n3yvzgrsqwSv.exe'
- '77.##.227.231':80
- 77.##.227.231/~website/ghazo187/connect.php