Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'help.exe' = '%APPDATA%\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\rsnotify.exe'
- %WINDIR%\Explorer.EXE
- %APPDATA%\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\rsnotify.exe
- 'qq####.guodeira.cc':443
- 'cs#######7btayl6k1.main2woo.su':443
- 'pp###2c.nmbc.cc':443
- DNS ASK qq####.guodeira.cc
- DNS ASK cs#######7btayl6k1.main2woo.su
- DNS ASK pp###2c.nmbc.cc