Техническая информация
- [<HKLM>\SYSTEM\ControlSet001\Services\123456] 'Start' = '00000002'
- %PROGRAM_FILES%\Remote\Remote.exe
- %TEMP%\58010226.tmp
- %TEMP%\58010226.tmp в %PROGRAM_FILES%\Remote\Remote.exe
- '30####88.3322.org':7078
- DNS ASK 30####88.3322.org
- ClassName: '' WindowName: '???????? ????'
- ClassName: '' WindowName: '????????????'
- ClassName: '' WindowName: '????????????????'