Техническая информация
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run\] 'NetWire' = '%APPDATA%\WinDriverl\DriverrTrusted.exe'
- [<HKLM>\SOFTWARE\Wow6432Node\Microsoft\Active Setup\Installed Components\{LACK84SR-MUAO-83IS-1026-P7BPDK58P4X4}] 'StubPath' = '"%APPDATA%\WinDriverl\DriverrTrusted.exe"'
- %APPDATA%\windriverl\driverrtrusted.exe
- '18#.#1.157.66':3360
- '%APPDATA%\windriverl\driverrtrusted.exe'