Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '4af229a29dc5f3f1bc5299025b18af88' = '"%TEMP%\Windows Firewall.exe" ..'
- [<HKLM>\Software\Microsoft\Windows\CurrentVersion\Run] '4af229a29dc5f3f1bc5299025b18af88' = '"%TEMP%\Windows Firewall.exe" ..'
- %APPDATA%\microsoft\windows\start menu\programs\startup\4af229a29dc5f3f1bc5299025b18af88.exe
- %TEMP%\windows firewall.exe
- DNS ASK tr####2.ddns.net
- '%TEMP%\windows firewall.exe'