Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'explorer' = '<SYSTEM32>\explorer.exe'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{98B790A4-4F52-55A8-FC5B-340D22628EE9}] 'StubPath' = '<SYSTEM32>\explorer.exe'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\explorer.exe
- 'ak####120.sytes.net':80
- 'ak####120.sytes.net':443
- DNS ASK ak####120.sytes.net