Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{33D70A47-FF08-C1BB-0701-070506030403}] 'StubPath' = '<SYSTEM32>\NeroCheck.exe'
- %WINDIR%\Explorer.EXE
- iexplore.exe
- 'xy###.3322.org':3460
- 'yi###ngweb.com':3460
- 'yi####gweb.3322.org':3460
- 'sh###n.oicp.net':3460
- DNS ASK yi###ngweb.com
- DNS ASK www.yi###ngweb.com
- DNS ASK xy###.3322.org
- DNS ASK yi####gweb.3322.org
- DNS ASK sh###n.oicp.net