Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{F0776F68-0B0F-1587-1323-F2E52ECE4CA3}] 'StubPath' = '<SYSTEM32>\Setup50.exe'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\Setup50.exe
- 'sa####35.sytes.net':1080
- 'ho######irect.servehttp.com':1080
- DNS ASK sa####35.sytes.net
- DNS ASK ho######irect.servehttp.com