Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'msconfig' = '%TEMP%\explorer.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'msconfig' = '%TEMP%\explorer.exe'
- %TEMP%\explorer.exe
- <SYSTEM32>\taskkill.exe /f /im TeaTimer.exe
- <SYSTEM32>\taskkill.exe /f /im mbamgui.exe
- %TEMP%\explorer.exe
- %TEMP%\dir
- 'po####nta.no-ip.biz':1
- DNS ASK po####nta.no-ip.biz
- ClassName: 'Indicator' WindowName: ''
- ClassName: '' WindowName: ''