Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Userinit' = '<SYSTEM32>\userinit.exe,%APPDATA%\services.exe'
- %APPDATA%\services.exe
- %APPDATA%\services.exe
- %APPDATA%\services.exe
- 'st#####.serveftp.com':23000
- 'co######s.game-server.cc':23000
- DNS ASK st#####.serveftp.com
- DNS ASK co######s.game-server.cc