Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Sdqali cawkoa] 'Start' = '00000002'
- %PROGRAM_FILES%\Ruvsws mcmaa\Aqiusec.exe
- <SYSTEM32>\wscript.exe "C:\7768.vbs"
- C:\7768.vbs
- %PROGRAM_FILES%\Ruvsws mcmaa\Aqiusec.exe
- C:\7768.vbs
- 'zh####94525.vicp.cc':2012
- DNS ASK zh####94525.vicp.cc