Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{21E9C5D3-EBFF-11CD-B6FD-00AA00B4E22A}] 'StubPath' = '%PROGRAM_FILES%\DBS.EXE'
- %PROGRAM_FILES%\DBS.EXE
- %WINDIR%\Temp\Oath.exe
- <SYSTEM32>\userinit.exe
- %PROGRAM_FILES%\DBS.EXE
- %WINDIR%\Temp\Oath.exe
- %WINDIR%\Temp\Oath.exe
- 'ls####sys.3322.org':8090
- DNS ASK ls####sys.3322.org
- '<IP-адрес в локальной сети>':1035