Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Controller' = '%WINDIR%\Controller.exe'
- '%WINDIR%\Controller.exe'
- %WINDIR%\Controller.exe
- %WINDIR%\Controller.exe
- %TEMP%\~DF1A29.tmp
- 'ep#.wo.tc':80
- 'ru##r.me':80
- ep#.wo.tc/bot/d/IP.txt
- ep#.wo.tc/bot/a/UID.txt
- ru##r.me/Pop/Text/Info2.txt
- DNS ASK ep#.wo.tc
- DNS ASK ru##r.me