Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'teamviewer' = '%APPDATA%\Install\teamviewer.exe'
- '%APPDATA%\Install\teamviewer.exe'
- [<HKLM>\SOFTWARE\ORL\WinVNC3]
- [<HKCU>\SOFTWARE\ORL\WinVNC3]
- %APPDATA%\Install\teamviewer.exe
- %APPDATA%\Install\ntfs.dat
- 'ma##.##rongboltmail.com':465
- 'my###asis.com':80
- my###asis.com/CARDS/cinp.php?cm###
- my###asis.com/CARDS/loading.php
- DNS ASK ma##.##rongboltmail.com
- DNS ASK my###asis.com
- ClassName: 'Indicator' WindowName: ''