Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ЗУФ' = '%TEMP%\444.exe'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{9532F4B6-8DE4-A871-4AAE-582F4702DE9F}] 'StubPath' = '%TEMP%\444.exe'
- %TEMP%\444.exe
- %TEMP%\444.exe
- 'lo####008.no-ip.biz':3460
- DNS ASK lo####008.no-ip.biz