Техническая информация
- [<HKLM>\System\CurrentControlSet\Services\.Net CLR] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\.Net CLR] 'ImagePath' = '<SYSTEM32>\lcrbye.exe'
- %WINDIR%\syswow64\lcrbye.exe
- '89.##.73.136':6380
- '%WINDIR%\syswow64\lcrbye.exe'