Техническая информация
- [<HKLM>\System\CurrentControlSet\Services\xiao bin zhangga] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\xiao bin zhangga] 'ImagePath' = '%ProgramFiles%\mouth\nouth.exe'
- %ProgramFiles%\mouth\nouth.exe
- '45.##4.11.204':6547
- '%ProgramFiles%\mouth\nouth.exe'