Техническая информация
- [<HKLM>\System\CurrentControlSet\Services\icardres] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\icardres] 'ImagePath' = '"%WINDIR%\SysWOW64\icardres\icardres.exe"'
- 'icardres' "%WINDIR%\SysWOW64\icardres\icardres.exe"
- 'icardres' %WINDIR%\SysWOW64\icardres\icardres.exe
- из <Полный путь к файлу> в %WINDIR%\syswow64\icardres\icardres.exe
- '18#.#01.197.106':8080
- http://18#.###.197.106:8080/9K3cK3zjkBZ0mRZf/6UMB/TOF2/fZYaM63RTQ/sJPLDDa5kZDf01GZzNC/ via 18#.#01.197.106