Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'itmoservs' = '%TEMP%\itmoservs.exe'
- %TEMP%\itmoservs.exe
- %TEMP%\itmoservs.exe
- %TEMP%\itmoservs.exe
- 'py.##.#-have-no.info':60024
- DNS ASK py.##.#-have-no.info
- ClassName: 'Indicator' WindowName: ''