Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{A9B4258F-E062-D24D-D528-1FCE14B29CDD}] 'StubPath' = '<SYSTEM32>:bootcf.exe'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>:bootcf.exe
- %TEMP%\text.txt
- 'ma##exp.org':995
- DNS ASK ma##exp.org