Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\clr_optimization_v2.0.60827_X64] 'Start' = '00000002'
- %WINDIR%\Temp\conime.exe
- %WINDIR%\Temp\conime.exe -install
- <SYSTEM32>\cmd.exe /c ""%TEMP%\~0.bat" "
- %WINDIR%\Temp\~DFREG0.tmp
- %TEMP%\~0.bat
- %WINDIR%\Temp\conime.exe
- 'nb.##hack.com':8600
- DNS ASK nb.##hack.com
- '<IP-адрес в локальной сети>':1036