Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{32201CAC-BFA4-48FF-8309-46B2DE1113DE}] 'StubPath' = '<SYSTEM32>\winupd.exe'
- <SYSTEM32>\winupd.exe
- <SYSTEM32>\cmd.exe /c ""<SYSTEM32>\melt.bat" "
- <SYSTEM32>\melt.bat
- <SYSTEM32>\winupd.exe
- 'ke#####ky.no-ip.info':1005
- DNS ASK ke#####ky.no-ip.info