Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'd446e335e7b2db5faacbbe3e56f4bbb6' = '"%WINDIR%\ethernet.exe" ..'
- [<HKLM>\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 'd446e335e7b2db5faacbbe3e56f4bbb6' = '"%WINDIR%\ethernet.exe" ..'
- '%WINDIR%\syswow64\netsh.exe' firewall add allowedprogram "%WINDIR%\ethernet.exe" "ethernet.exe" ENABLE
- %WINDIR%\ethernet.exe
- 'me####fh.hopto.org':5552
- DNS ASK me####fh.hopto.org
- '%WINDIR%\ethernet.exe'
- '%WINDIR%\syswow64\netsh.exe' firewall add allowedprogram "%WINDIR%\ethernet.exe" "ethernet.exe" ENABLE' (со скрытым окном)