Техническая информация
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Windows] 'Load' = '%HOMEPATH%\Installer\expand.exe'
- iexplore.exe
- %HOMEPATH%\installer\expand.exe
- %APPDATA%\remcos\logs.dat
- DNS ASK re#####utos.kozow.com
- DNS ASK re#####utos.zapto.org
- DNS ASK ke####en.hopto.org
- DNS ASK jk#####ng2014.ddns.net
- DNS ASK su####878.ddns.net
- DNS ASK su####878.dynu.net
- DNS ASK je####.hopto.org
- '%ProgramFiles(x86)%\internet explorer\iexplore.exe'