Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'SVCSHOST' = '%WINDIR%\f5ba33a5821cd5307a1ae3365390134f.exe'
- %HOMEPATH%\Start Menu\Programs\Startup\f5ba33a5821cd5307a1ae3365390134f.exe
- 'a1#####8251.f3322.org':2014
- DNS ASK a1#####8251.f3322.org