Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Nmce' = '%ProgramFiles%\tpsw\ctto.exe'
- %ProgramFiles%\tpsw\ctto.exe
- %ProgramFiles%\tpsw\ctto.exe
- DNS ASK nf.###ckspring.net
- DNS ASK cu.###ckspring.net
- '%ProgramFiles%\tpsw\ctto.exe'