Техническая информация
- [<HKLM>\System\CurrentControlSet\Services\mfc100chs] 'Start' = '00000002'
- [<HKLM>\System\CurrentControlSet\Services\mfc100chs] 'ImagePath' = '"%WINDIR%\SysWOW64\mfc100chs\mfc100chs.exe"'
- 'mfc100chs' "%WINDIR%\SysWOW64\mfc100chs\mfc100chs.exe"
- 'mfc100chs' %WINDIR%\SysWOW64\mfc100chs\mfc100chs.exe
- из <Полный путь к файлу> в %WINDIR%\syswow64\mfc100chs\mfc100chs.exe
- '18#.#20.79.227':80
- '91.##6.4.234':443
- http://91.###.4.234:443/Y6b6mVeRyYh/Pyjdge4VWthNTTjfUKT/Uu5sYuP4DP6a4dko/PT4l2/ via 91.##6.4.234