Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{8BD61993-B77F-EDA9-73A3-05C518C36503}] 'stubpath' = ''
- <SYSTEM32>\svchost.exe
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\dllfile\hckcmd.exe
- %APPDATA%\addons.dat
- %APPDATA%\addons.dat
- <SYSTEM32>\dllfile\hckcmd.exe