Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '0x433A5C55736572735C757365725C42726F6B65724C6962' = '%HOMEPATH%\BrokerLib\adsldpc.bat'
- %WINDIR%\microsoft.net\framework\v2.0.50727\regasm.exe
- %HOMEPATH%\brokerlib\adsldpc.bat
- %APPDATA%\36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee\run.dat
- 'ne#####n.duckdns.org':7654
- DNS ASK ne#####n.duckdns.org
- '%WINDIR%\microsoft.net\framework\v2.0.50727\regasm.exe'