Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Bowserui] 'Start' = '00000002'
- <SYSTEM32>\svchost.exe -k Bowserui
- <SYSTEM32>\rundll32.exe "%TEMP%\~td1.tmp,ins"
- <SYSTEM32>\syslg.dll
- %TEMP%\~td1.tmp
- 'ec###.lflink.com':443
- DNS ASK ns#.#322.net
- DNS ASK ec###.lflink.com
- DNS ASK ns#.#hina.com