Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{P60L71WF-SEQP-G30K-B4RF-020B4U5N6D44}] 'StubPath' = 'c:\dir\install\install\server.exe Restart'
- C:\dir\install\install\server.exe
- %TEMP%\server.exe
- %APPDATA%\logs.dat
- %TEMP%\XxX.xXx
- %TEMP%\UuU.uUu
- %TEMP%\server.exe
- C:\dir\install\install\server.exe
- %TEMP%\XX--XX--XX.txt
- %APPDATA%\logs.dat
- %TEMP%\UuU.uUu
- %TEMP%\XxX.xXx
- %TEMP%\XX--XX--XX.txt
- %TEMP%\server.exe
- 'ha#####ebook.no-ip.org':1605
- DNS ASK ha#####ebook.no-ip.org