Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\woqfk] 'Start' = '00000001'
- [<HKLM>\SYSTEM\ControlSet001\Services\ifjm] 'Start' = '00000000'
- <DRIVERS>\ifjm.sys
- <SYSTEM32>\gvl.dll
- 's.##zy.com':80
- s.##zy.com/stat.php?pw####
- DNS ASK s.##zy.com