Техническая информация
- [<HKLM>\System\CurrentControlSet\Services\NaturalLanguage6] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\NaturalLanguage6] 'ImagePath' = '"%WINDIR%\SysWOW64\NaturalLanguage6\NaturalLanguage6.exe"'
- из <Полный путь к файлу> в %WINDIR%\syswow64\naturallanguage6\naturallanguage6.exe
- '18#.#77.155.123':990
- '13#.#08.252.149':80
- http://13#.#08.252.149/3pNZS/vvwcTnSjUJdx5AkSUh/jPMQ/soYI/XwMDuw08/2Ob9RPz/