Техническая информация
- [<HKLM>\System\CurrentControlSet\Services\Media_NoHacker.cn] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\Media_NoHacker.cn] 'ImagePath' = '%WINDIR%\NoHacker.cn.exe'
- 'Media_NoHacker.cn' %WINDIR%\NoHacker.cn.exe
- ClassName: 'OLLYDBG', WindowName: ''
- %TEMP%\ixp000.tmp\1.exe
- %WINDIR%\nohacker.cn.exe
- %WINDIR%\nohacker.cn.exe
- %TEMP%\ixp000.tmp\1.exe
- '35####357.3322.org':8000
- DNS ASK 35####357.3322.org
- '%TEMP%\ixp000.tmp\1.exe'
- '%WINDIR%\nohacker.cn.exe'
- '%TEMP%\ixp000.tmp\1.exe' ' (со скрытым окном)