Техническая информация
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'cshost' = '%APPDATA%\Crypted_result_UFR3.0.1.0.exe'
- %APPDATA%\MitCtbujo.exe
- %APPDATA%\cshost.exe
- %APPDATA%\MitCtbujo.exe
- %APPDATA%\cshost.exe
- %APPDATA%\Crypted_result_UFR3.0.1.0.exe
- 'ft###.hostland.ru':21
- DNS ASK ft###.hostland.ru
- ClassName: 'Indicator' WindowName: ''