Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '668c3b73ff001375922be9c725d29283' = '"%TEMP%\Masnger.exe" ..'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '668c3b73ff001375922be9c725d29283' = '"%TEMP%\Masnger.exe" ..'
- %HOMEPATH%\Start Menu\Programs\Startup\668c3b73ff001375922be9c725d29283.exe
- '%TEMP%\Masnger.exe'
- '<SYSTEM32>\netsh.exe' firewall add allowedprogram "%TEMP%\Masnger.exe" "Masnger.exe" ENABLE
- %TEMP%\Masnger.exe
- 'al####r.no-ip.biz':1177
- DNS ASK al####r.no-ip.biz
- ClassName: 'Indicator' WindowName: '(null)'