Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{13C395D3-B060-A6EE-F9A9-302D7AF425A2}] 'stubpath' = ''
- <SYSTEM32>\svchost.exe
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\dllfile\hckcmd.exe
- %APPDATA%\addons.dat
- %APPDATA%\addons.dat
- <SYSTEM32>\dllfile\hckcmd.exe
- 'uh####fe.no-ip.org':62130
- DNS ASK uh####fe.no-ip.org