Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'EnableFirewall' = '00000000'
- %TEMP%\%tmp%.exe
- %WINDIR%\explorer.exe
- %TEMP%\%tmp%.exe
- %TEMP%\winamp\svhost.exe
- %TEMP%\winamp\svhost.exe
- 'ba###.no-ip.biz':1604
- DNS ASK ba###.no-ip.biz