Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ipsecservice' = '%TEMP%\drWebsrv.exe'
- %TEMP%\drWebsrv.exe
- %TEMP%\drWebsrv.dat
- %TEMP%\drWebsrv.lgo
- %TEMP%\drWebsrv.exe
- %TEMP%\installer.bat
- 'at###church.org':80
- at###church.org/images/dal2.php
- DNS ASK at###church.org
- DNS ASK microsoft.com
- ClassName: 'Indicator' WindowName: ''