Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'nXl60Lp' = '%HOMEPATH%\lZx92Rw\IconChanger.exe'
- %WINDIR%\microsoft.net\framework\v2.0.50727\regsvcs.exe
- %TEMP%\autc37.tmp
- %HOMEPATH%\cgm67mh.lu2
- %APPDATA%\imlgs\19-02-2020
- %HOMEPATH%\cgm67mh.lu2
- %TEMP%\autc37.tmp
- 'an#####aah.no-ip.biz':82
- DNS ASK an#####aah.no-ip.biz
- '%WINDIR%\microsoft.net\framework\v2.0.50727\regsvcs.exe'