Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\winscard2] 'Start' = '00000002'
- <SYSTEM32>\winscard2.exe
- <SYSTEM32>\cmd.exe /c "%TEMP%\$$$$$$$$czz.bat"
- %TEMP%\$$$$$$$$czz.bat
- <SYSTEM32>\winscard2.exe
- 'fr.##amlive.com':443
- DNS ASK fr.##amlive.com