Техническая информация
- %APPDATA%\microsoft\windows\start menu\programs\startup\svchost.exe
- 'wi#######dateservice.mypi.co':5553
- 'br#####t.duckdns.org':8080
- DNS ASK br#####t.duckdns.org
- DNS ASK wi#######dateservice.mypi.co
- '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' Get-MpPreference -verbose