Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{5YI814OC-8N66-VP65-MWQL-3C2LT5LKYXI1}] 'StubPath' = '"%APPDATA%\Install\Host.exe"'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'svchost' = '%APPDATA%\Install\Host.exe'
- %WINDIR%\win.ini
- %TEMP%\~DF83C5.tmp
- %APPDATA%\Install\Settings.ini
- %TEMP%\~DF739F.tmp
- %APPDATA%\Install\Host.exe
- %APPDATA%\Install\Settings.ini
- %TEMP%\~DF739F.tmp
- 'ne##.#ttps443.org':3399
- DNS ASK ne##.#ttps443.org
- '%APPDATA%\Install\Host.exe'