Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = 'explorer.exe %WINDIR%\Media\Installed\lsass.exe'
- %WINDIR%\Media\Installed\lsass.exe
- %WINDIR%\Media\Installed\MSWINSCK.OCX
- %WINDIR%\Media\Installed\lsass.exe
- %WINDIR%\Media\Installed\MSWINSCK.OCX
- %WINDIR%\Media\Installed\lsass.exe
- 'ch#####sfury.no-ip.biz':7700
- DNS ASK ch#####sfury.no-ip.biz