Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'mara' = '<SYSTEM32>\info.scr'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{D4EDF546-BD55-929A-3A57-1550422AC0AD}] 'StubPath' = '<SYSTEM32>\info.scr'
- %WINDIR%\Explorer.EXE
- msnmsgr.exe
- <SYSTEM32>\info.scr
- 'ma##.#logdns.com':20008
- DNS ASK ma##.#logdns.com