Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Application' = '%APPDATA%\Application.exe'
- %APPDATA%\Application.exe
- %APPDATA%\Application.exe
- %APPDATA%\CLH00.dll
- 'sm##.gmail.com':587
- 'www.co##ska.com':80
- www.co##ska.com/CLH00.dll
- DNS ASK sm##.gmail.com
- DNS ASK www.co##ska.com