Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\seclogon] 'Start' = '00000002'
- <SYSTEM32>\IEXPLOR.EXE
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\data[1].txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\data[1].txt
- '25####.s69.sqnet.cn':80
- 25####.s69.sqnet.cn/jeron/data.txt
- DNS ASK 25####.s69.sqnet.cn