Техническая информация
- [<HKLM>\SYSTEM\ControlSet003\Services\syugre] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet002\Services\syugre] 'Start' = '00000002'
- [<HKLM>\SYSTEM\ControlSet001\Services\syugre] 'Start' = '00000002'
- '<SYSTEM32>\svchost.exe' -k syugre
- <SYSTEM32>\oowdaz.dll
- <SYSTEM32>\00049851.ini
- 'li##.##aoyaolong.com':97
- DNS ASK li##.##aoyaolong.com