Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'update' = '<SYSTEM32>\ update.scr'
- <SYSTEM32>\ update.scr
- %WINDIR%\system\reload.bat
- %WINDIR%\system\update
- %WINDIR%\system\update в %WINDIR%\system\update.scr
- 'dr####a1.no-ip.biz':1234
- DNS ASK dr####a1.no-ip.biz
- ClassName: 'Tapplication' WindowName: 'ULTIMOS DIAS'