Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{ACF73CA2-D92F-75F5-E00F-3DD625A59DE5}] 'StubPath' = '<SYSTEM32>:614t.exe'
- %WINDIR%\Explorer.EXE
- msnmsgr.exe
- <SYSTEM32>:614t.exe
- 'tw##.mrface.com':443
- DNS ASK tw##.MrFace.com