Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{05055098-745F-7747-0503-040604010702}] 'StubPath' = '<SYSTEM32>\xphlp.exe'
- %WINDIR%\Explorer.EXE
- <SYSTEM32>\xphlp.exe
- 'dr####.no-ip.org':81
- 'da####ata.no-ip.biz':81
- DNS ASK dr####.no-ip.org
- DNS ASK da####ata.no-ip.biz