Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'sdnYalB' = '%HOMEPATH%\sdnYalB\lltFp.exe'
- '%WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe'
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
- %APPDATA%\Imminent\Logs\26-12-2014
- 'th#####arry.no-ip.biz':9003
- DNS ASK th#####arry.no-ip.biz