Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Vipdl] 'Start' = '00000002'
- '<SYSTEM32>\ipdl.exe'
- '<SYSTEM32>\cmd.exe' /c DelMe.bat
- <Текущая директория>\DelMe.bat
- <SYSTEM32>\ipdl.exe
- 'ya####zhu.dns71.com':80
- ya####zhu.dns71.com/count.asp?ma#########################################################
- DNS ASK ya####zhu.dns71.com