Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'sysfbtray' = '%WINDIR%\bill110.exe'
- %WINDIR%\bill110.exe
- <SYSTEM32>\cmd.exe /c %WINDIR%\dxxdv34567.bat
- %WINDIR%\dxxdv34567.bat
- %WINDIR%\bill110.exe
- %WINDIR%\bill110.exe
- '74.##5.232.51':80
- 74.##5.232.51/
- DNS ASK www.google.com