Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'SVCSHOST' = '%WINDIR%\db43f92f074cec13a3a97c1ee3d4e612.exe'
- %HOMEPATH%\Start Menu\Programs\Startup\db43f92f074cec13a3a97c1ee3d4e612.exe
- 'q5####9568.vicp.cc':2014
- DNS ASK q5####9568.vicp.cc