Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'lansetting' = '%TEMP%\00036003.exe'
- %TEMP%\00036003.exe
- <SYSTEM32>\cmd.exe /c ""%TEMP%\_uninsep.bat" "
- %TEMP%\_uninsep.bat
- %TEMP%\00036003.exe
- %TEMP%\InitAccess.txt
- 'dl.##ad006.asia':81
- DNS ASK dl.##ad006.asia