Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'lolo' = '%TEMP%\server.exe'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{489F4F45-3A2C-4297-352C-D11B7C421F40}] 'StubPath' = '%TEMP%\server.exe'
- '%TEMP%\server.exe'
- %WINDIR%\Explorer.EXE
- msnmsgr.exe
- %TEMP%\server.exe
- %TEMP%\aut1.tmp
- %TEMP%\aut1.tmp
- 'lo#####2009.no-ip.biz':777
- 'ha####ha.no-ip.biz':777
- 'lo#####32007.dyndns.biz':777
- DNS ASK lo#####2009.no-ip.biz
- DNS ASK ha####ha.no-ip.biz
- DNS ASK lo#####32007.dyndns.biz