Техническая информация
- [<HKLM>\System\CurrentControlSet\Services\GrayPigeon_Hacker.com.cn] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\GrayPigeon_Hacker.com.cn] 'ImagePath' = '%WINDIR%\Hacker.com.cn.exe'
- %WINDIR%\hacker.com.cn.exe
- %WINDIR%\hacker.com.cn.exe
- '<LOCALNET>.1.3':8000
- '%WINDIR%\hacker.com.cn.exe'