Техническая информация
- [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{C34F969F-8F37-7776-CB89-7BA122794423}] 'StubPath' = '<SYSTEM32>:system32.exe'
- <SYSTEM32>\inj.exe
- <SYSTEM32>\RFI-Scan.exe
- %WINDIR%\Explorer.EXE
- <SYSTEM32>:system32.exe
- <SYSTEM32>\inj.exe
- <SYSTEM32>\RFI-Scan.exe
- <SYSTEM32>\inj.exe
- 'gi#####r0x.no-ip.biz':3460
- 'my#####uca.no-ip.biz':3460
- DNS ASK gi#####r0x.no-ip.biz
- DNS ASK my#####uca.no-ip.biz