Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Network Access jrq] 'ImagePath' = '%WINDIR%\zmdpmg.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Network Access jrq] 'Start' = '00000002'
- '%WINDIR%\zmdpmg.exe'
- %WINDIR%\zmdpmg.exe
- 't2#####1070.wicp.net':3516
- 'da####ng.wicp.net':3516
- DNS ASK t2#####1070.wicp.net
- DNS ASK da####ng.wicp.net