Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'ntldt' = '<SYSTEM32>\project1.exe'
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{B2E17168-9028-6C31-16EA-19F5A71F266C}] 'StubPath' = '<SYSTEM32>\project1.exe'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\project1.exe
- 'bo###.s.my03.com':10312
- DNS ASK bo###.s.my03.com