Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{22DE15C6-FE09-B679-0206-010306020102}] 'StubPath' = '<SYSTEM32>\ssmsms.exe'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\ssmsms.exe
- 'qq.##pto.org':89
- 'sa##.no-ip.org':89
- DNS ASK qq.##pto.org
- DNS ASK sa##.no-ip.org