Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Control\SecurityProviders] 'SecurityProviders' = 'msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll, msimg64.dll'
- <SYSTEM32>\msimg64.dll
- %TEMP%\~ER1.tmp
- %TEMP%\~ER1.tmp
- DNS ASK so####hade.co.kr
- ClassName: '' WindowName: ''