Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{C02A8F43-4CD3-4866-F347-BDD72BB38557}] 'StubPath' = '<SYSTEM32>\psnvy.exe'
- %WINDIR%\Explorer.EXE
- msnmsgr.exe
- <SYSTEM32>\psnvy.exe
- 'po####ivy.oicp.net':443
- DNS ASK po####ivy.oicp.net