Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{36E43D4B-4E7D-482E-A52F-04598530DE98}] 'StubPath' = '%WINDIR%\fvdeehds.exe'
- %WINDIR%\fvdeehds.exe
- %WINDIR%\fvdeehds.exe
- 'ls####ei.gicp.net':1005
- DNS ASK ls####ei.gicp.net