Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\Nationaloks] 'ImagePath' = '<SYSTEM32>\tkzbkq.exe'
- [<HKLM>\SYSTEM\ControlSet001\Services\Nationaloks] 'Start' = '00000002'
- '<SYSTEM32>\tkzbkq.exe'
- ClassName: 'pediy06' WindowName: ''
- ClassName: 'GBDYLLO' WindowName: ''
- ClassName: 'OLLYDBG' WindowName: ''
- <SYSTEM32>\tkzbkq.exe
- <SYSTEM32>\tkzbkq.exe
- <Полный путь к файлу>
- 'ma####2mb.codns.com':8087
- DNS ASK ma####2mb.codns.com