Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'WinService' = '%APPDATA%\jsvchost.exe'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{295B11C6-8A29-1C37-8139-97A00D328973}] 'StubPath' = '%APPDATA%\jsvchost.exe'
- %APPDATA%\jsvchost.exe
- %WINDIR%\NOTEPAD.EXE
- %WINDIR%\Explorer.EXE
- %APPDATA%\jsvchost.exe
- 'cn####.no-ip.biz':37901
- DNS ASK cn####.no-ip.biz